Anyone know if Microsoft ever added MDM support outside #Intune for their iOS/Android apps? https://rcpmag.com/articles/2015/06/19/mdm-outlook-for-ios-android.aspx
The way I see it, the company who can innovate solve the most mobile “problems” is going to win. Each are doing some… such as this one Citrix just presented: Secure Forms - http://docs.citrix.com/en-us/worx-mobile-apps/10/secure-forms.html
https://itunes.apple.com/us/app/jump-desktop-remote-desktop/id364876095?mt=8
Just had a great phone interview for a Mobile Success Engineer position at Apteligent! Hoping to get the job! 🤞😁 https://www.apteligent.com/company/careers/career/?position=owMq3fwv
Has anyone tried using a Safari Web Content Filter (Blacklist) to prevent iOS update notifications from popping up? Requires iOS7+Supervision, but might be useful in case a device ends up on an open WiFi network where you don’t have the ability to blackhole the URLs. https://veffort.wordpress.com/2015/09/21/suppressing-ios-updates/
https://bayton.org/2016/02/restricting-access-to-activesync/
Interesting read. Definitely time to get onto iOS 10. http://blog.trendmicro.com/trendlabs-security-intelligence/ios-masque-attack-spoof-apps-bypass-privacy-protection/
*Thread Reply:* @thebjohn are you heading out for the training and whatnot or just the main conference?
*Thread Reply:* Was not aware of additional training? I'll be there for the main conference. Flying in Monday afternoon, leaving Friday morning
*Thread Reply:* They typically to training on day 1-2 and then conference 3-5? It may have changed this year tho
*Thread Reply:* Got an email from Ojas about some of it last night.
*Thread Reply:* I got an email on the Mobile Iron Diagnostic Service from Ojas, but not training that I recall
*Thread Reply:* Perhaps they cut it out all together this year.
*Thread Reply:* It was a pretty big production to put on
*Thread Reply:* And honestly there are enough opportunities to put things together in your mind. Sometimes training amongst peers in a short timeframe can be more frustrating than it's worth.
*Thread Reply:* No doubt. I learn a lot just from networking with people at the conference as well, that's a big part of it
*Thread Reply:* Right! And I think we are at a point now where it's tough to emulate a lot of what we have going on inside training. Better just to ask questions and apply the answers to what you know about your environment.
*Thread Reply:* I agree. Every environment is different, so it would be difficult to cover everyone's use case in a couple day training.
*Thread Reply:* I think those Birds of a Feather style conversations would be useful. Heck, even a public Slack team for people to join and do Q and A would be awesome.
*Thread Reply:* Where are you based out of again?
*Thread Reply:* Not to mention you could have people post links to manuals, screen shots, etc
Sounds like a good crowd! Jereme is giving me some updates but it would be nice to hear what others are hearing, experiencing and learning out there. http://www.reactiongifs.com/r/l0fb.gif
Anyone looking to use the new MacOS management enhancements within MI Core/Cloud? https://www.youtube.com/watch?v=TvsCDdd_VrI
Good morning everyone, hope you had a good weekend. My wife has started a Virtual Administrative Services business, and we are working on marketing her right now to gain more clients. Any help with reaching out to people you may know looking for any help in this space, we would be glad to touch base with and help. You can find our info here: https://nakandcompany.com.
This was my first time “building” a site FYI, leveraged Squarespace and built off a template, pretty user friendly. Any feedback is also greatly appreciated.
*Thread Reply:* thebjohn: Very nicely done! Love the clean layout. Is it responsive? Testing from my phone now
*Thread Reply:* Looks good on phone as well. I can see this being a very popular service with startups
*Thread Reply:* Have all the back-end covered, but need someone to handle the administrative tasks. Virtual is an even bigger bonus
*Thread Reply:* Thanks for the feedback. It is optimized to run on mobile, has seemed very responsive in the different platforms and form factors I have tested on
*Thread Reply:* This can definitely suit everything from startups and small businesses to Enterprises, but no doubt, I know startups are a good market to try and seek out
*Thread Reply:* Nice! Just sent it to my brother
*Thread Reply:* Red Mark Pictures might need one. They’re blowing up
*Thread Reply:* http://redmarkpictures.com
*Thread Reply:* I’ll check out his work. Looks very professional
*Thread Reply:* Welcome! Their attention to detail is over the top.
*Thread Reply:* That is a lucrative industry to be in. And takes on a whole new level to wedding photos, definitely way above and beyond, that’s awesome
*Thread Reply:* Right! They just booked their highest priced wedding to date. If anything else this gives him an option to offload AA work so they can focus on the product
*Thread Reply:* People pay insane amounts of money for weddings, makes sense to capture that market. Good for him
*Thread Reply:* Well we hope to hear from him, and hopefully he is looking for help!
*Thread Reply:* Gotta tell him to secure his site yo!
*Thread Reply:* What secure angle you speaking? TLS or something more?
*Thread Reply:* How’s the startup going for you?
*Thread Reply:* Yeah. I find TLS to be a tough pitch to people who are focused strictly on content
*Thread Reply:* I totally did.. but not the hosted website version, just the onprem one 😄
*Thread Reply:* Nice! Any customizations @Jason Bayton?
*Thread Reply:* Current install is just sat there, but a previous version was heavily modified just to see how far I could take it.
*Thread Reply:* Nice! Was curious how many knew of it and/or were using it. I believe we need something similar to front-end MobileIron Cloud
*Thread Reply:* OH! ha, im sorry i missed that was going back and forth on slack
*Thread Reply:* We used MI Tunnel I think
@onires53 Looks like the iOS VPN App removal was back on July 29th, 2017 - http://money.cnn.com/2017/07/29/technology/china-apple-app-store-vpn-express/index.html
*Thread Reply:* Actually, let’s try that here @jaimin.s
*Thread Reply:* How’s iOS 11 Testing on Blackberry Dymamics?
Our code of conduct is up! Well, v1 of it anyways: https://github.com/MobilXperts/codeofconduct/
How Apple is bringing us into the age of facial recognition whether we’re ready or not - The Washington Post https://apple.news/AzqyjeptKQSmyQukTZgFw8g
https://instagram.com/p/BY-_XpgBCTr/
*Thread Reply:* It's a lovely city for sure!
*Thread Reply:* Any questions on BES 4.x under domino I'm all over it ;)
*Thread Reply:* That’s great! Are you working remote for a company out of Indianapolis? What device platforms and management suite do you deal with primarily?
*Thread Reply:* Yep. I work for Computacenter US. The contract I'm currently on is for Rolls-Royce Aerospace North America. Currently, we're wrapping up migration from Good to BB UEM on iOS devices.
*Thread Reply:* Nice! That sounds like a good sized engagement. How’s the migration going?
*Thread Reply:* ~3,000 devices and we're at close to 2,000 migrated in 4 weeks. Most folks are pretty excited about the new product. The UEM console is a revamp of BES 5.5, but it's pretty nice.
*Thread Reply:* It’s been updated! @Herman @Darryl Miles
*Thread Reply:* Hello @Damian - It’s great to have you. 2007 was a great year to get started! Blackberry was hot back in those days. It sounds like that introduction a decade ago has served you well!
*Thread Reply:* Hello @Woody It sure has...BlackBerry are back on track though - in the Gartner leader segment with the Good acquisition. I've seen some serious market penetration by Airwatch here in France though!
*Thread Reply:* Intune is fine, just not great at large estates or complex requirements. The full EMS suite enabling DLP and managing the office apps including outlook is the real strength. It's really all about what you want the device experience to be and what you're looking to do with it.
Price wise you can't go wrong, but it's the capability you need to be careful with.
We internally are moving to EMS from airwatch because the main use case for mobile devices is email and content consumption. And by using outlook and office apps that's the bull of users happy.
Airwatch is being kept purely for those users who have more complex app requirements.
At the end of the day, if you want to securely manage the native office suite you have no choice but to use Intune : http://www.brianmadden.com/opinion/What-does-the-Microsoft-Graph-API-for-Intune-mean-for-the-rest-of-the-EMM-market
*Thread Reply:* Would you mind taking a moment to introduce yourself @Jesus Latorre? What‘s new with you in the world of mobility?
*Thread Reply:* Sure absolutely! Hi all, name is Jesus. My EMM provider is IBM MaaS360, so if anyone has questions on that I'll try my best to answer as much as I can!
*Thread Reply:* Nice! It’s great to have someone with MaaS360 in the house. Are you EST?
Would you like to take a moment and introduce yourself @Alan Del Giudice? What kind of fun are you presently having in the world of mobility?
}
*Thread Reply:* Welcome @julien! It’s great to have you. Like the idea of vendor-specific channels.
*Thread Reply:* Think we should prefix vendor channels with a v? e.g vappaloosa
*Thread Reply:* Hey @Woody, makes total sense. But this ruins my plans of masquerading as an expert on my own product 🙂 I’m renaming the channel.
*Thread Reply:* LoL! I’m all ears though, since this is the first public Slack team I’ve administered.
*Thread Reply:* Marseille here @julien will be I tsresting to see your USP.
*Thread Reply:* Nice! I'll have to take a look. Are you using it? Is it essentially a SAML Proxy?
Hello all, I'm Duncan from The Netherlands. The what? :flag_nl: https://youtu.be/ELD2AwFN9Nc?t=35s I am working for an international beer brewer that is headquartered in Amsterdam. We are currently mainly using MobileIron but also exploring Microsoft.
*Thread Reply:* Good idea, @Duncan. Hey @MobilXperts Admin would it be appropriate to create a #groundcontrol channel here? I understand the focus isn’t on vendors (certainly not sales), but there are some niche problems that we can solve.
*Thread Reply:* (Although @Duncan mostly I’m hear to learn and to help when I can. My site enterpriseios.com is pretty neutral.)
*Thread Reply:* Yes, absolutely @aaron. It’ll be v_groundcontrol (v for Vendor)
*Thread Reply:* Welcome, @aaron! I for one need a deep dive into the product so I’ll keep an eye on that channel 🙂
*Thread Reply:* @egantner got clarification on this. @thomrburg rocks! :thehorns::skintone_2:
https://itunes.apple.com/ca/app/beer-store/id891836768?mt=8
*Thread Reply:* @thomrburg were you able to locate anything more on this? Still curious if multiple VPP accounts must be created for each country or if a single VPP account could be granted access to assets in multiple countries.
*Thread Reply:* @Woody From https://images.apple.com/business/docs/VPP_Business_Guide.pdf :
*Thread Reply:* Multinational support VPP apps can be assigned to devices or users in any country where the app is available, enabling multi- national distribution for enterprises. Developers can make their apps available in multiple countries through the standard App Store publishing process in iTunes Connect. Purchases still need to be made in a country where the VPP store is available.
*Thread Reply:* Right. But that’s somewhat misleading.
*Thread Reply:* The app would be published, allowing multi-national distribution. A central VPP account (singular) would be established. Then a representative in said country would need to log-in to that account and make the “purchase”?
*Thread Reply:* For your example, if an app has multinational support, and it’s available in the same country as that organization’s singular VPP Account, then it only has to purchased and deployed once.
*Thread Reply:* Ah, that’s even simpler. Time to test. Thank you, sir!
*Thread Reply:* 👍:skintone2: Let me know how it goes!
*Thread Reply:* Absolutely. Have a great evening!
*Thread Reply:* Training my brain and setting examples to: A) Use Channels B) Use Threads
*Thread Reply:* Should've just used discourse :p
*Thread Reply:* Good evening, @Simon Hardy-Bistagne!
*Thread Reply:* Anyone @aaron refers is a friend of ours!
*Thread Reply:* Digging your website. The iPhoneLess write-up was interesting.
*Thread Reply:* Yeah, the article was a bit of a nice surprise.
*Thread Reply:* Thanks Mr. Woodsy and Aaron. It’s pretty long winded, but it’s justified when trying to do something almost no one does. I wanted to be as thorough as possible so if anyone else had thought about it, they could learn from my experience.
*Thread Reply:* VIDM can simply connect to Airwatch to check compliance policies so no need for an agent. It’s called adaptive management. We’re going to use this solution for our BYOD light roll-out and users will authenticate using our third party IDP which we’ve added in VIDM.
Btw. Do you guys know http://emm.how as I have seen this by accident somewhere. Seems there is some good stuff by those guys published.
*Thread Reply:* Thanks for sharing. I think I’ve seen this before, but lost track of it. Useful.
@thebjohn all airwatch apps support compromised protection. Additionally you can build your WS1 policies to require device compliance which helps also. Check my blog out for more info on a easy and basic WS1 setup
*Thread Reply:* Device compliance is with AirWatch on the backend. @thebjohn I thought your attempts at MAM is vIDM + WS1 only. No AW?
*Thread Reply:* @jafullersr That is correct, MAM with IDM and WS1 only, we will not be leveraging the agent and MDM features
*Thread Reply:* @Mobile Jon With the above note from @thebjohn, compliance engine at the device level would not be possible. Compromise detection would need to be enabled at the console for the app, so where are the settings for these security options in vIDM/WS1?
*Thread Reply:* @jafullersr in the near future VIDM and AW will be merged for the most part. Without AirWatch you cannot achieve compliance. You aren’t going to have any MDM in play at all?
*Thread Reply:* For this solution, no. We will be running our current on-prem Mobile Iron Solution for MDM loving forward, and would run Workspace One Hosted for non-managed devices.
*Thread Reply:* Not sure of that ;-) mobility is too complex to maintain to become a commodity...
Splendid! It looks like the Technical Symposium events are going well, based on what I’ve seen on LinkedIn. Happy to hear this Team is coming up in conversations!
}
*Thread Reply:* @Kiran Patel I concur. #mi_sentry is legacy from the early days haha
*Thread Reply:* I've pre-ordered the Pixel 2 XL, which I guess is a similar level of fanboyery 🙂
*Thread Reply:* I would be interested in doing a side by side with the Pixel 2 XL, looks pretty slick
*Thread Reply:* I need to check and see what’s included as part of my iPhone Upgrade Program…
*Thread Reply:* I’m with T-Mobile and already eligible for Jump, just have to wait for the preorder release. I ended up getting the Wife an 8.
*Thread Reply:* I’m evaluating making the jump to TMo right now @thebjohn. How’s it been thus far for you?
*Thread Reply:* Really looking forward to the Netflix and free GoGo WiFi on Delta (albeit still slow as dial-up)
*Thread Reply:* Here in The Mitten, I’ve had no issues with T-Mobile. My family back in Phoenix complains they have issues, but I’m not there anymore, so I don’t care 🤷:skintone2:♂️. Ya they are good with those types of incentives. “Unlimited” data has been a life saver for me, 8-10gb average usage for me monthly
*Thread Reply:* We use WiFi Cellular almost exclusively and when we travel it’s not to anywhere too far off the grid, so I figure we’ll be okay there. We’re on VZ unlimited now and I agree, we go crazy (because well, we’re paying for it()
*Thread Reply:* If you are paying for it, may as well take advantage of it!
*Thread Reply:* I was looking forward to comparing the two also as a former colleague was getting the X..
But he backed out this week :(
*Thread Reply:* Backed-out as in left the firm? #Quitter
*Thread Reply:* Decided not to sink into further debt I guess :p
*Thread Reply:* He was a former colleague before this already 😁
*Thread Reply:* I’ll be up at 12:01 buying two iPhone X
*Thread Reply:* Keep 'em in rotation @HackediOS? 🙂
*Thread Reply:* You can send one of those 2 my way for testing purposes @HackediOS
*Thread Reply:* @thebjohn I would but they’re actually going to be in use :)
*Thread Reply:* Go big or go home @Russell Mohr :the_horns:
*Thread Reply:* Okay @Amine - Let’s use #microsoft for EMS and add an #O365 channel for anything specific to that service
Anyone missing Telnet after you upgraded to MacOS High Sierra? HomeBrew to the rescue! https://dor.ky/restore-telnet-in-mac-os-high-sierra-10-13/
*Thread Reply:* It was a 32-bit app, @NicolasR and was holding us back, LoL. Fortunately it can be brought back via HomeBrew or searching through a time machine backup.
Useful list! (Disclaimer: it mentions me 😊) http://www.brianmadden.com/opinion/All-of-Jacks-favorite-enterprise-mobility-management-articles-and-resources-updated-for-iOS-9
Not entirely sure. They only posted this:
https://m.facebook.com/story.php?story_fbid=2056564121082217&id=167074500031198&__tn__=%2As%2As-R
https://www.theverge.com/2017/10/30/16570244/google-pixel-2-xl-poor-audio-recording-quality
and https://www.theverge.com/circuitbreaker/2017/10/30/16569368/pixel-2-empty-packaging-wired-pixel-buds
*Thread Reply:* And again... https://www.reddit.com/r/GooglePixel/comments/7a7jec/finally_got_my_pixel_2_xl_today_only_it_was/
*Thread Reply:* the pixel is the only device that could make me switch from an iPhone, but it’s not going to be this year
*Thread Reply:* I’ve got a Nokia 8 on the way for some Android enterprise testing, their kit is super vanilla and I’ve got a feeling it might be enough to satisfy my requirements.. though I’m still after the Galaxy to test Linux.
*Thread Reply:* Ditto, @thebjohn! We’ve got a #CandyOverload here and we haven’t even been out to see the neighbors.
I believe, but do not hold it against when its not correct, that as of Windows 10 v1703 (Creators update) the default (or a subset of the) MDM capabilities within Windows 10 work on the Hololens. Check: https://docs.microsoft.com/en-us/hololens/hololens-requirements
*Thread Reply:* OMG. What happened between Pixel and Pixel2?
*Thread Reply:* I almost made a vote entry for something like that, LoL
*Thread Reply:* None are brilliant alternatives based on my usage of them. Where’s my message in a bottle option? 😉
*Thread Reply:* Good one! If only I could update the poll on the fly. May have to look for an alternative plug-in that offers that feature.
*Thread Reply:* I’d like the Message In A Bottle option, but also one that will include a performance by Sting and The Police
*Thread Reply:* I like that song, but never understood the line “A year has passed since I broke my nose…” (listen carefully!)
*Thread Reply:* I concur. He probably needed filler material for that particular part of the verse and, well… that did the trick
Ha. Pixel ain't alone any more!
https://thenextweb.com/apple/2017/11/10/iphone-x-displays-plagued-mysterious-green-line-death/?amp=1
*Thread Reply:* Aw, snap! Fun time of year to be starting that process.
*Thread Reply:* Not in the Mitten. Which may play to our favor though
*Thread Reply:* Anything specific you’re looking for, besides kid friendly with more room, etc?
*Thread Reply:* Basically that. 4 bedroom 2.5 bath and if a finished basement, excellent, if not, big enough to finish for a man cave
*Thread Reply:* I ordered a note 8. Not anywhere near as exciting as a new house though.
*Thread Reply:* Yeah @thebjohn you’ll be set with the 4BR 2.5BA and a finished/partially-finished basement
*Thread Reply:* As long as the price is right in a good area, that’s the stressful part.
*Thread Reply:* Let me know how that 8 is @Jason Bayton . I’m still loving my X so far
*Thread Reply:* I’m gonna go the X route as soon as we get transferred to T-Mobile. Since work provided a Pixel, I’m good on the Droid front for the time being.
Curious: Has anyone looked at Samsung’s EMM offering? https://www.samsungsds.com/us/en/solutions/off/emm/EMM.html
*Thread Reply:* They're setting me up with a trial imminently.
*Thread Reply:* Actually, I think I recall seeing this on one of your recent LI posts. Right?
*Thread Reply:* Yup! They'd told me something was launching a couple weeks back but weren't heavy on details. Now we know!
*Thread Reply:* I suppose Apple might as well launch their own MDM. File under “Everyone Else is Doing it”
*Thread Reply:* This is replacing their previous EMM - IAM MDM (or something like that). But yes agree. Sony has one too don't you know
*Thread Reply:* Everyone is trying to get market share in this space
*Thread Reply:* We had a meeting with Apple and it definitely sounded like zero desire to get into that space
*Thread Reply:* Samsung told me many times, they do not have (big) customers using it! Do not believe Apple would ever do things like that.
*Thread Reply:* Yeah - We saw what happened during the first MDM boom - They either all went belly-up or were acquired. IdK why Samsung thinks we need yet another offering
*Thread Reply:* They will make something in KNOX proprietary to their MDM to entice people to move to it, just a guess
*Thread Reply:* @thebjohn There will be a very big change with OREO in Knox v3.0, so I would not expect things like that 🙂
*Thread Reply:* Yes, we have set it up multiple times. For specifically Samsung devices its ok. For example if you want to do KNOX workspace or KNOX MDM APIs (former SAFE). For generic Android (AfW) and iOS, the product is lagging some important features.
*Thread Reply:* Samsung MDM offering is absolutely a mess... even non mature customers rejected it!!
*Thread Reply:* (Bugs, not easy to setup/understand and also their connector requires some domain admin permissions to bind the domain)
*Thread Reply:* My son used to rave about OnePlus, their themes, the Oxygen OS, etc., though after a couple of years using them he now wants an iPhone again… (He’s almost 19, if that makes a difference?!)
*Thread Reply:* I think there's still a big following but the charm is wearing off as they up the price every release.
*Thread Reply:* Interesting. Thinking that back door left in will probably steer a lot of folks in other directions.
*Thread Reply:* Absolutely. Intentional or not there will be those who will lose all trust. O+ are either reckless or pretty awful.
It's not a massive issue given from what I've seen it requires ADB to activate it (tell me otherwise..) but we need better.
*Thread Reply:* Agree. In this day and age, it’s tough to think releasing a product with inherent/documented security risks would be found to be acceptable.
*Thread Reply:* Obviously there has always been Kerberos Constrained Delegation. Curious if anyone is cutting-out the Kerberos and just having the client authenticate directly using an Identity Cert.
*Thread Reply:* I prefer Sentry blocking non-compliant devices to removing complete configurations from the device. Or would you use Integrated Sentry in that scenario? Or MI Tunnel?
*Thread Reply:* Can be done, but not tunneled through the Sentry. So you either need to publish a CAS on the public internet or use a LB of some sort to handle this (f5, netscaler).
*Thread Reply:* Ps I never really use Sentry block as the data remains on the device. Using Quarantine options, you remove the certificate and data and thus stop non compliant devices
*Thread Reply:* I like to have both options available depending on the type of violation. Quarantine means the mail config is re-pushed, removing all user-configured settings and performing a full sync.
*Thread Reply:* Honestly - If you’ve got KCD/CBA, removing and re-push/re-sync isn’t bad (provided the customer has a small default sync period). I get leaving mailbox data on the device, but losing it all together would drive most into correcting the problem.
*Thread Reply:* Indeed! I think Vodafone is starting to wobble now under the lack of product development, so I thought i’d make a move before things got messy.
*Thread Reply:* Must've been a while in the making with their 3 month notice, unless that's not required elsewhere. Where are you headed?
*Thread Reply:* 3 months toiling away and ticking off the days indeed! Will PM you otherwise i feel a sales influx of DMs!! lol
*Thread Reply:* Wow, a 3 month notice! Is that typical with just Vodafone or across the board in their region?
*Thread Reply:* In vodafone 1 month is standard, 3 months is also standard when you're a certain band or above.
*Thread Reply:* Ah, okay! Yes, that seems fair to all involved parties.
*Thread Reply:* When you're special like myself and @Simon Hardy-Bistagne, you can't avoid that 3 months 😛
*Thread Reply:* It’s nice someone thinks we’re special @Jason Bayton !
https://techcrunch.com/2017/11/28/astonishing-os-x-bug-lets-anyone-log-into-a-high-sierra-machine
I'm guessing most have seen this by now. That has to be hands-down the best balls up I've seen in a while!
*Thread Reply:* Is certainly like to, though imagine it won't be a million miles off my Asus Chromebook flip with android app compatibility
*Thread Reply:* How’s ChromeOS looking in terms of management?
*Thread Reply:* It's on my list to test, but absolutely zero interest from customers to date
*Thread Reply:* Gotcha. Nice looking devices. Would like to get my hands on one as they mature for Enterprise use.
Welcome Matt! Plenty of experts in here ;)
}
*Thread Reply:* Just brainstorming. Something to recap what’s going on in the EMM arena for those who aren’t able to join, don’t have the time, or have long commutes and need something to bide the time
*Thread Reply:* That sounds cool. I'd be up for taking part.
*Thread Reply:* A former colleague of mine is a member of the Network Collective http://thenetworkcollective.com
*Thread Reply:* I kind of like the approach they’ve taken
*Thread Reply:* Just food for thought. I think this could be great for 2018!
*Thread Reply:* I’d be happy to host it, on enterpriseios.com. Android welcome too.
*Thread Reply:* I will take a look later as well. I have a very short commute, but it would be something I would listen to while working down in my shop on decidedly low tech stuff.
*Thread Reply:* If we do get a few projects off the ground we'd do well to get something public set up I think. Even a simple landing page would do as a place to link to off Slack.
*Thread Reply:* Oh, absolutely. I think perhaps it would make sense to have a couple “staple” hosts, then invite members from this team in, depending on the subject matter, etc.
*Thread Reply:* Great idea. I am interested.
*Thread Reply:* Did you guys ever manage to get this going?
*Thread Reply:* Not just yet @Damian. Are you still interested? I want to, but my schedule can’t take on any more until March or so. Buying an older home has my nights/weekends tapped-out
*Thread Reply:* Still interested here. @ a new gig over at Okta, so getting the ropes down and then I can jump back in
*Thread Reply:* I hope it goes well for you there.
*Thread Reply:* Thanks @jafullersr - It’s been fun thus far!
*Thread Reply:* Hey folks, did this ever happen?
*Thread Reply:* I don’t think there are any podcasts out there that deal with pure mobility
*Thread Reply:* Let’s make something happen?
*Thread Reply:* Okay - I think we can make this thing a reality. I think we should follow in the footsteps of my friends over at Network Collective - https://thenetworkcollective.com
*Thread Reply:* Legit site for presence, with information about who contributes, links to videos, social medial, etc.
*Thread Reply:* I hear @thebjohn will have some free time for a couple weeks, LoL
*Thread Reply:* Maybe in a couple of weeks 😁. This new gig has been crazy hectic out of the Gates. I’ll get the hang of it quick!
*Thread Reply:* Thanks @Jason Bayton it’s great to be here! 😉
*Thread Reply:* Honestly not too involved in the blackberry side of things, though I do wonder what they've done to Android that allows them to claim it'll be secure without patches..
*Thread Reply:* Yup I believe I got the last post.
*Thread Reply:* @Yoni Toorenspits shows me as joined. The reddit site is dead.
who in their sane mind buys BlackBerry devices? 😎
}
*Thread Reply:* I agree. But Blackberry has extended support for two more years
Check my response in the Goodberry. @Rob H has seen this.
}
I invited you there. it seems when you invite someone, they auto join.
*Thread Reply:* Must be @Yoni Toorenspits thanks for the invite.
*Thread Reply:* base models…They didn’t need more..They wanted them for the color
*Thread Reply:* And the graphics go up to 16gb right?
*Thread Reply:* That's nice; I just revived my hex-core rig with a new board and octacore CPU after it cooked in summer. Only 4gb graphics though 😛
*Thread Reply:* …need more ☕ before responding, @Paul Troisi. However, I do agree regarding the mid-market provided we continue to drive the overall value of EMM/UEM upwards.
The question is: What else in 2018 will continue to drive that value up?
*Thread Reply:* We sent communications to all our Corporate devices requiring the upgrade. And strongly suggested for our BYOD devices.
In fact, this lead to further investigation, a blog post and a press release that all went live today: https://www.bridgeway.co.uk/blog/only-4-percent-of-enterprise-mobile-devices-are-patched-against-meltdown
*Thread Reply:* I do not see it. Am I missing something?
We have looked at several VDI type solutions and feedback from our customers is no. They want mobile apps. They do not even like using the Microsoft Web apps.
}
We are looking at Appdome. Problem is getting vendors to play nice. They do not need to right in an SDK, they just need to supply an updated binary in Appdome's library. Then we would fuse it ourselves. Supports quite a few vendors. Airwatch, Blackberry, and others.
}
Hi folks, CWSI and Google are running a Mobile Thought Leaders event in Google Dublin on the 2nd of Feb if anyone's interested in coming along. https://cwsi.ie/state-enterprise-mobility-2018/
*Thread Reply:* Looks interesting, but after MWC my next ticket will likely be out the door if I ask for any more international events
*Thread Reply:* https://en.roomn-event.com/ March 6-8 in Monico
*Thread Reply:* Yeah I've been "invited"... just wondered if anyone know the even or the benafits
*Thread Reply:* A couple nights in Monaco sounds pretty beneficial to me!
*Thread Reply:* @julien can tell you more about it, as we participated last year
*Thread Reply:* I think my follow-up question would also be how french language heavey is the event too.
*Thread Reply:* We have attended last year. The only positive thing is that we had a good time clubbing with customers and partners. For everything else than that, you can avoid.
*Thread Reply:* Not sure if this isn’t actually an incentive for you guys to attend 🤔
*Thread Reply:* @Simon Hardy-Bistagne where are you in France?
*Thread Reply:* Living in Marseille, but in our Paris office every other week.
The Google experience is so much better than Alexa... If only I could connect more than just my Gmail calendar to it...
}
*Thread Reply:* I agree. Analysts are a necessary evil. Peers are better for real world validation, but the higher-ups always want to hear from the analysts.
Try this out @Simon Hardy-Bistagne https://www.ivm-vending.eu/ This is what we are using. They arent the best but its a starting point.
*Thread Reply:* Hi Tomasz, sure for all Technical Documentation we have the IBM Knowledge Center https://www.ibm.com/support/knowledgecenter/en/SS8H2S/com.ibm.mc.doc/mc_collateral/mc_landing.htm
*Thread Reply:* Also we have the public community site here: http://www.ibm.com/developerworks/connect/maas360
*Thread Reply:* Also I’ll add you to the MaaS360 channel
*Thread Reply:* That sounds good! Thanks for the feedback @Amine
*Thread Reply:* hi Amine, I would be happy to help you with your issue fusing the Airwatch SDK. I am meeting with our support team tomorrow, so i could look into this for you. feel free to fwd me details at alan@appdome.com
*Thread Reply:* hi Amine, I would be happy to help you with your issue fusing the Airwatch SDK. I am meeting with our support team tomorrow, so i could look into this for you. feel free to fwd me details at alan@appdome.com
*Thread Reply:* Hey, Sorry for the slow response guys.
@Jeremy The solution doesn't support p12 unfortunately. Which is where the issue is arising @Jason The PFX does in fact contain the private key. The client is aware of the security risks involved with this method but is currently emailing the cert to device users anyway. i have advised them that integration with their CA to allocate and distribute SCEP/ NDES would be a much preferred method, but currently their CA is 2 years out of date.
*Thread Reply:* Oh wow, that’s concerning. I guess I’d be tempted to give up at this stage. Ask them to turn it all off and put it all back in the box it came in? Perhaps they don’t deserve a mobile security solution after all?
*Thread Reply:* haha i dont think the sales team would be too impressed if i did that 😛 ive managed to prove it as a poc with iOS for now but i ended up just advising them that the CA would be required for iOS
I really wish there was a tool like Apple Configurator for Android devices! >.<
Maybe ill build one and become rich 😛
*Thread Reply:* Slack has been fine for me but I'm not a heavy participant here. I'd be happy to see about other mediums if there is another platform that would work better.
*Thread Reply:* Slack is good but soon may reach the limits of the free tier. Discord could be an option
*Thread Reply:* We’ve surpassed the limits already, as far as I see it’s only message history we lose. That does mean solutions to questions and whatnot will eventually get lost though.
Discord, Discourse or Rocket.Chat come to mind.. depends I guess on the format people are happiest with. I wouldn’t change anything for the sake of it, even less so if people decided not to migrate (if it even gets to that point).
*Thread Reply:* What about Atlassian’s Stride? Is that a serious contender yet?
*Thread Reply:* I am liking Slack. I’m in it daily anyway for 3 other communities (including our own corp), and like that it is close at hand?
*Thread Reply:* That’s why I dig it the most, @aaron. I can Apple-Key+1/2/3 and immediately come over from other teams. I don’t want another app 😆
*Thread Reply:* I'm a fan of slack, and I think the history is still here, just no longer searchable further fact than I think 10k posts.
*Thread Reply:* Cool, as long as folks are happy
*Thread Reply:* Exclaimer I think can do it: https://blog.exclaimer.com/optimizing-email-signatures-for-mobile-devices/
*Thread Reply:* Wow - That is slick. I still can’t believe Apple hasn’t baked-in something to handle this in the Exchange config side
*Thread Reply:* I can't imagine it would be too hard to add an API in that you can populate with the wild cards. But in fairness support of advanced corporate functions in their mail clients across ios and macos is desperately lacking! (Reading encrypted mails and mfa comes to mind!)
*Thread Reply:* Thanks for the warm welcome @Woody. To all here, here's a great video showing the Fusion of Okta SSO with OpenID to the Jive Daily iOS app. https://www.youtube.com/watch?v=mGH-ZoXwq6o
*Thread Reply:* Great to have you, @Jan Sysmans! If anyone has questions about AppDome product offerings, they have graciously supplied several resources (@alan bavosa/@Tom Tovar/@Jan Sysmans) to man the #v_appdome channel 👍
@Al Platt are we taking a native Device Administrator scenario here? If you go Android Enterprise, the M@W app is what procures the work persona and cannot be removed (without retiring the device from management). On a related note, Device Administrator is scheduled to go away... https://bayton.org/2017/12/google-is-deprecating-device-admin-in-favour-of-android-enterprise/
*Thread Reply:* I like the redesign of your website!
*Thread Reply:* When did you last visit? It's not changed really in over a year 😄
*Thread Reply:* About 2 months ago 🙂 But I see now what's changed: Last time I always looked during working hours so I got the day theme every time, this time I got the night theme. That's why it looked so different. Definitely like the night theme better (can't wait for the dark theme on macOS either!)
*Thread Reply:* ah ok! Glad you like it 🙂 seemed like a good idea given it's such a light theme otherwise.. mostly from writing at night and dealing with the glare myself 😄
New offering from EBF: OnBoarder. I’m curious, are sales reps from EMMs actively bundling/licensing this as a means to ease customers over to a new platform? It almost makes sense to save R&D dollars as an EMM and just recommend their tools. https://ebf.de/en/products/ebf-onboarder/
*Thread Reply:* Thanks for sharing this, I was not aware of EBF before.
*Thread Reply:* Welcome! Those guys are rock stars. I think @Fabian would agree 🙂
*Thread Reply:* From the looks of it, it does look amazing.
*Thread Reply:* It’s as good as it gets, in terms of where we are with device management (and not being able to script additions/removals with embedded agents/services)
*Thread Reply:* It looks like they will be adding migration to MaaS360 to their offering.
*Thread Reply:* Has anyone real field experience with the tool? And what’s the cost? I’ve 15K devices distributed over 75 countries, mix of Android and iOS.
*Thread Reply:* Just a guess. You’re affiliated with the EBF peoples?
*Thread Reply:* See: https://ebf.de/en/blog/launch-of-ebf-onboarder-for-mobileiron-at-mobileiron-live-2018-was-a-resounding-success/ ;-)
*Thread Reply:* There's no Play w@w, you'll need to use Chrome & Tunnel or public proxy for now.
The others need to be configured via managed app configs within the app on Core once imported from Play because indeed you don't use the in-house ones any longer!
*Thread Reply:* Web@Work indeed, not available. But Docs@Work and Email+ are.
*Thread Reply:* I usually go to the MacAdmins slack for this kind of question, they have channels for everything including #activedirectory
*Thread Reply:* Sign up here: https://macadmins.herokuapp.com/
*Thread Reply:* I spend most of my time there that's why I'm not here so much 🙂 I wish it would be possible to combine channels from different slacks in the same view so I don't have to switch all the time.
*Thread Reply:* For a while it was possible through the IRC bridge but they just killed that
*Thread Reply:* I was recently advised of NoMad https://nomad.menu
*Thread Reply:* Check out Apache Directory Studio.
*Thread Reply:* http://directory.apache.org/studio/
*Thread Reply:* @Jay: I think Simon means a replacement for Windows' Directory Users & Groups panel (Microsoft Management Console plugin). By the way I'm deploying NoMAD in a pilot currently but not that happy about it.. We're binding to AD and while it adds some nice features it tends to confuse the users as well.
*Thread Reply:* @jafullersr Thanks for the tip! I didn't realise that existed. Will try it out
*Thread Reply:* No way to manage AD natively on the Mac, a VM is the way to go for that. Powershell for Mac doesn’t even have AD modules available. I can vouch for NomAD though as well as Enterprise Connect. Binding macOS brings very little benefit apart from kerberos and certs for 802.1 which both of those apps get around.
*Thread Reply:* stand by, asking someone with more experience on this, Core?
*Thread Reply:* Thanks @Alex Mercer Yes it’s on prem Core
*Thread Reply:* I think you need to use $Cert_Alias:SCEPNAME$ (likely Core)
*Thread Reply:* OR emailcertificateX where X is 1 through 10 (likely cloud)
*Thread Reply:* not sure if thats both core and cloud - Email+ for iOS Guide is where I see that
*Thread Reply:* I have $Cert_Alias:CertName$ but this is a user certificate not SCEP. From what I’m reading, User certs aren’t supported in the Play version of EMail+… We can ask users to install manually but the issue is it doesn’t recognise the CA as being valid.. This is for Digicert issued SMIME.
*Thread Reply:* Sent you screengrabs on Direct Message.
*Thread Reply:* ill be away for the week…. @egantner maybe you can chime in here?
*Thread Reply:* The email certificate kvp should do, at least in regards of adding your CA to the email+ trust store.
*Thread Reply:* Sorry to have to pick this up again (sidetracked on another project) The kvp already pushes the cert to the device, that works fine. Its the fact that the cert is classed as invalid and any others that are received are untrusted. Seems like email+ isn’t looking at the trusted CAs or something.
*Thread Reply:* Did you push CA certs to email+ ? Email+ does not use the default device trust/ca keystore I believe.
*Thread Reply:* I think it would be handy. Surely there must be a few people on here who use JAMF/
*Thread Reply:* @Woody are either of these services hosted?
*Thread Reply:* Excellent. We’ll get a channel created. @jafullersr the JAMF instance is hosted. AD/LDAP is still on-prem for the time being.
*Thread Reply:* Have you checked JAMFNation? I did a cursory search there and didn’t turn up anything specific to this sort of setup.
*Thread Reply:* @macbentosh Was just curious about how to establish a connection to an on-premise LDAP env from a JAMF Pro cloud instance
*Thread Reply:* So, that appears to be the Infrastructure Manager?
*Thread Reply:* does a lot of their work. It is also their healthcare listener
*Thread Reply:* That’s cool man. Appreciate it @macbentosh
*Thread Reply:* I associate IBM with Domino which lost a lot of customers to Exchange over the years but nice to see them back in the game. What’s the deal with BigFix?
*Thread Reply:* BigFix is Client Management Tool to manage Legacy PC
*Thread Reply:* which is missing to MobileIron UEM
*Thread Reply:* Well MaaS360 has also been a leader for 6+ years now
Curious, has anyone heard of https://www.fleetsmith.com?
*Thread Reply:* Okay, I stand corrected. Did not realize Workspace ONE UEM (AirWatch) was equipped at this point
*Thread Reply:* https://www.youtube.com/watch?v=_TsCn9mKNf8
*Thread Reply:* It’s all a double billing process right now, really about convenience more than features. We’ve had a bunch of people POC it, and most of them change their mind after about a week 🤣
*Thread Reply:* @Matthew Shaver Thanks for the feedback. Yeah, what’s there appears to be pretty rudimentary
Wow...
*Thread Reply:* No, not with DEP. If it eventually supports SAML I definitely would.
*Thread Reply:* DEP is where we would like MFA as well. But in a round about way, it is multi-factor. The device is enrolled to DEP, which is managed by your company administrators. This also is a certificate/token that is brokered between your EMM and DEP. Then having the user enter a username/password to enroll is a second factor. Something you have (device) and something you know (password). Not quite… I know.
*Thread Reply:* Agreed.
It's the whole chicken and egg scenario.
How can I send them the 2nd factor push message if they're not enrolled yet.
Sadly it revolves round a poor MFA Implementation on our end.
*Thread Reply:* The fact that the device is going to end up in management is kind of a nice second hard factor
*Thread Reply:* Politics and ownership are the reasons why you might have a 3rd party idp vs one that might play better with a mobility platform.
Those who run the IAM team are potentially disconnected to those who run the infrastructure such as sccm, or mobility.
They will have drivers around federation into other platforms and potential custom integration into internal tools or platforms which may be easier and cheaper outside of the Microsoft ecosystem. Ping for example has api integration capabilities that can carry out conditional access based on say the airwatch compliance status.
Policy control might be another area that some idp may be stronger in.
If the mobility team ran the world, the choice we might make may be different. If you’re a WorkspaceOne house, you might opt to go down that route for all your idp. Same said for MobileIron as existing contracts and agreements might make simply enabling that function simpler than getting in a new provider.
The same issue actually is what prevents UEM from exploring. Mobile teams govern mobile, and desktop teams govern desktop. And for the mobile teams to try to introduce something like WorkspaceOne as a replacement to sccm is a hard sell.
This though is where Microsoft have a massive leg up. They already talk to all areas of the business, from mobile to desktop to infrastructure. They are already seeding intune as the UEM of choice, and if they can play your internal company politics better than you can, then you’ll soon find it being pushed in that direction.
*Thread Reply:* Hi Simon, thanks for your info and honesty 🙂 From a mobile perspective, can you integrate Ping enough to get it working? Any cases where Ping adds value in addition to UEM?
*Thread Reply:* So MaaS360 has a similar approach from the UEM perspective and bundles IBM Cloud Identity as its IDP. This means customers get full SSO for Mobile apps and Browser for 100's of predifined SaaS services and there is no need for complex integration with the UEM platform. As an IDP it works well with ADFS and other platforms so no need to dislodge other solutions... but
*Thread Reply:* I'd agree with Simons point that "This though is where Microsoft have a massive leg up. They already talk to all areas of the business, from mobile to desktop to infrastructure. They are already seeding intune as the UEM of choice, and if they can play your internal company politics better than you can, then you’ll soon find it being pushed in that direction." - I experienced this all too well in my IBM days
*Thread Reply:* Its like fighting the tide in many cases - you struggle to gain a foothold and when you do, its eroded over time.
*Thread Reply:* I would also argue that the case was different a few years ago, but MSFT have been working hard to create feature-parity for the common use cases, reducing the clear water between offerings. I would also posit that a significant number of enterprise-class organisations wish to keep their AD on-premise, and use an IdP for cloud access management and as an alternative to AD forest creation and dissolution.
*Thread Reply:* Unfortunately, some of the more advanced use cases do often require upgraded MSFT licences, so the old bait-and-switch approach is still alive and well… 🙄
*Thread Reply:* On VMware side, using VIDM as a second IDP is interesting for two main reasons: 1) using VIDM in addition to ADFS or Okta will add conditional access. In that case only enrolled and compliance devices will be able to access to your enterprise apps. 2) VIDM is designed for native SSO mobile apps (which is the only solution to do that)
Hence, having multiple IDP is for having tye best-of-bread of each solution
*Thread Reply:* **reminding myself to respond to this when I get back to my keys 😁
*Thread Reply:* I can attest to that @Maxime Crouzet as I believe we were the first in France to put mobileSSO in place for our iOS & Android mass deployment! Works a treat @Woody I’m sure you remember all our discussions on this 😉
*Thread Reply:* Thanks for the replies guys. @Maxime Crouzet how does that work from a user perspective? For example on iOS? What does the user get on a functional level?
*Thread Reply:* Exactly, A unified catalog and an authentication with no password !
*Thread Reply:* Why use an IdP next to Azure AD and ADFS? I see some of you use Ping or Okta also. What is the added value in using these, with or without Azure AD?
Key value add is having an IdP that’s more than an IdP. ROI through being agnostic and, having a massive catalogue of pre-integrated apps, MFA/AMFA, Lifecycle Management, Access Management, etc. As we all know, once you go with a solution that’s the center of your world… it’s tough to up and change.
What do these bring to the table with regard to Mobile? Single sign-on? Does it work well with your UEM? Anything it adds in that space?
Building on what I mentioned above, IdPs that are properly integrating should have solutions with EMMs of the world. Case in point, Okta with VMWare Workspace ONE and MobileIron Access. Seamless hand-off, allowing Workspace ONE and Access to do what they do best (device enrollment/posture check/Mobile SSO), then closing the loop and sending signals back to Okta to allow or deny access based on their findings.
*Thread Reply:* Sorry, it’s early and I’m jacked-up on coffee. LMK if there are any areas you’d like me to elaborate on 🙂
*Thread Reply:* BTW, I’m with Okta, so I’ll update my avatar to reflect that 🙂
*Thread Reply:* Actually it does not really show (write it under “what i do”. But I was aware that you are okta
*Thread Reply:* With okta... small difference ;)
*Thread Reply:* I’m sure it’s there, if we upgrade to a paid plan 😆
*Thread Reply:* We're doing the same.
It's just waiting for the Emm platforms to support the deployment which most do now.
It also puts less stress on the network Infrastructure.
If they're using aad for authentication then they should be able to use certainly based auth without issue.
*Thread Reply:* @Peter Meuser what CA challenges? Going thread to avoid blowing-up the lobby
*Thread Reply:* Has MobileIron not yet added the ability to push the OAuth Exchange profile for iOS 12?
*Thread Reply:* We do that through a custom profile for iOS 12+ and MI Core
*Thread Reply:* That sounds accurate for MI. I’m sure they’ll push it in a minor Core update
*Thread Reply:* Citrix SecureMail supports OAuth, and provides you with mVPN capabilities and over 60+ MAM policies. https://docs.citrix.com/en-us/citrix-secure-mail/modern-authentication-office-365.html
*Thread Reply:* Thanks, I should have asked if there was a channel. I have since joined.
Why does this still work exist?? Anyone use it?
Microsoft releases its redesigned Cortana app for iOS https://www.engadget.com/2018/11/14/microsoft-cortana-ios-app-redesign-voice-assistant/
*Thread Reply:* Just shared this in the jobhunters channel for you.
*Thread Reply:* @Simon Hardy-Bistagne SOTI Mobicontrol does manage Linux devices. If you are interested in finding out more, let me know and I'll get you in touch with the right experts.
*Thread Reply:* Tonight I received an odd message from SOTI. Seems there is an Apple issue. I assume this would affect others too.
> App Store issue preventing the installation of App Store apps on iOS devices November 19, 2018 > >SOTI MobiControl is currently experiencing an issue where requests to install App Store apps on iOS devices are failing. SOTI has investigated the issue and determined that iOS devices are unable to complete app installation requests that use the Bundle ID of the app – one of Apple’s approved identifiers for App Store apps and the identifier used by SOTI MobiControl’s App Catalog rules. There is no workaround or resolution for this issue at this time. Apple has acknowledged that this is an issue on their end and are actively working on a fix, but have not provided a timeline for resolution. SOTI is working with Apple, and will provide periodic updates on the investigation and resolution of the issue. > >The issue was first reported on November 15th. Since that time, any company using SOTI MobiControl has been unable to install App Store apps via an App Catalog rule. This issue applies to App Store apps deployed with or without VPP licenses or redemption codes, and affects all versions of iOS and all versions of SOTI MobiControl. > >Enterprise apps (i.e. in-house developed apps) and VPP B2B Managed Distribution apps are not impacted by this issue, and can still be installed on iOS devices via SOTI MobiControl. > > We are committed to getting this issue resolved as quickly as possible, so you can resume normal operation.
*Thread Reply:* Got it. Is it only impacting SOTI?
*Thread Reply:* Issue Resolved: Installation of Apple iOS App Store Apps
November 27, 2018
A recent issue that prevented SOTI MobiControl customers from installing App Store apps on iOS devices has now been resolved by Apple. Normal operations of iOS devices using SOTI MobiControl have resumed.
We appreciate your patience as SOTI and Apple worked together to bring this issue to resolution.
Some light reading.
*Thread Reply:* “The main challenge is how to implement an app vetting process that does not overwhelm the administrator and does not frustrate the users,” ... My daily pleasure
*Thread Reply:* Seems to be proprietary, unless its open sourced, I doubt adoption will be high amongst other identity providers and service providers. How did you hear about it?
*Thread Reply:* Just sent you a link. You can search it from the channels list.
*Thread Reply:* We’re actually going to consolidate #airwatch and #workspaceone. Just haven’t gotten around to doing it yet 😉
*Thread Reply:* Hi, I‘d also be interested in joining that channel. Can I also get an invite please?
*Thread Reply:* @Julio If you tap the #airwatch or #workspaceone it will take you right in 🙂
*Thread Reply:* @Woody Worked, thanks for the pointer☺️
*Thread Reply:* This is one of the big issues with enterprise call plans.
Generally there is no eSIM support, no "multi-sim" support and also no voice over wifi support.
Enterprise plans will pick this up one day... but it won't be soon that for sure...
For Mac users, PDF Expert with Pro features is available for 20$ here: https://digitaloffers.imore.com/sales/pdf-expert-for-mac-2
*Thread Reply:* So you’re looking to enable a pin when trying to access something like the iOS mail app?
*Thread Reply:* Yes, sorry for the vague'ish question 🙂
*Thread Reply:* Well I'm not aware of any MDM API that could do that myself.
*Thread Reply:* The space is usually for containerization software, but now Android Enterprise has removed the need for that delivering the work profile. But for iOS we where wondering if there where any possibility for doing something similar with EMM software. If not then I am very open to suggestions on which EMM system delivers the best user experience with containerization/pin enablement for non-native work apps on iOS?
*Thread Reply:* Yeah so this isn’t something that can be done at the api level for a pin. But the segmentation when enabling domain level segments is pretty seamless.
Personally I’m a fan of the outlook Ux but it’s all about what functionality you want to deliver and what integration with your existing mdm you want.
*Thread Reply:* Agreed its more containerisation and as mentioned before either app wrapping/SDK. I'll try to be as unbiased as possible (for disclosure I'm ex MaaS360) - and it depends on what you are currently running and additional requirements. MaaS, MI and AW all offer strong feature sets with their containers - also you could bring some SSO into place perhaps if you need additional authentication for the apps (not native).
*Thread Reply:* Thanks for feedback. I guess InTune (which in my opinion has been inferior as an EMM product) actually might be preferred choice, because they can enable these features for office apps, which (maybe) are the next best thing to office apps 🙂
*Thread Reply:* next best thing to native apps. UX, familiarity etc.
*Thread Reply:* On MI specifically I'd use appconnect with Email+, Web@Work, plus any 3rd party apps also wrapped. As we're SOL on iOS for this functionality, an alternative is required.
*Thread Reply:* Thanks @Jason Bayton My native tongue is Danish, so the abbreviation SOL ?
*Thread Reply:* http://onlineslangdictionary.com/meaning-definition-of/sol
*Thread Reply:* lol - I wont translate your sentence back to english, I am unaware of the forum guidelines. But its pretty funny 🙂
https://twitter.com/JasonBayton/status/1075682787578007552?s=19
}
Twitter
*Thread Reply:* Bouygues with optical fiber ;-)
*Thread Reply:* Ah ok. I'm with bouygues at the moment .. just waiting for orange to turn on the fiber!
*Thread Reply:* You guys seen the new Freebox Delta?
*Thread Reply:* It’s pretty sweet and for the first time allows you to combine 4G with your ASDL
*Thread Reply:* I’m with Orange but will soon move to Free to avail of this service - I have a poor 7mb where I live...
*Thread Reply:* I just can't get over their poor support model and fact you can't even do a line check with free!
Where I am... The ADSL is all the same copper and orange are just finishing up laying down the fiber. Bouygues have been very good for the price.. but I desperately need fiber as my current 11mb connection is killing me.
As soon as orange can give me a date I'll move to their 1Gb down, 300MB up package.
I don't need a static IP at home. whenever I host stuff I'll do it in the cloud.
*Thread Reply:* I was able to do a line check with Free
*Thread Reply:* Just entered the address and they told what I can theoretically achieve
*Thread Reply:* I’m actually with Sosh - cheap and cheerful and internet works fine, just crappy speeds
*Thread Reply:* Hardwired the “hub” unit, then the other 2 were wireless mesh.
*Thread Reply:* Can't say I've seen this but sure it's not a one-off!
*Thread Reply:* Thanks for replying Jason, I found the solution here 🙂 https://stackoverflow.com/questions/50207790/please-configure-android-sdk/51083101
*Thread Reply:* Good stuff! For future, #android would better suit your questions on this topic 🙂
*Thread Reply:* Yup, I figured as much. Just not an an experienced Slack user yet. Thanks!
*Thread Reply:* Hi, yeah I've been doing some work for Banks.
*Thread Reply:* I work for a bank - when you say « a pain » in what respect? Banks are ultra security conscious if that’s what you’re referring to ;)
Revisiting this topic. Anyone happen to have experience with Virtru encryption for GMail?
}
*Thread Reply:* Yeah I agree, it's still not there yet after all these years. Especially now with Wayland there's many little things that don't work.. And the huge app gap of course.
*Thread Reply:* Agreed.. its come a long way but sometimes you just want things to work! I don't mind the odd bit of CLI but half the time you end up having to clone git repos and install other software just get 1/2 way through the pre-reqs. That's not how I want to spend my time anymore..! Now on my Raspberry Pi's I don't mind because thats a hobby system but for main use nope!
*Thread Reply:* Yes that's why I moved to Mac in 2003... Great POSIX OS with "Just works", mainstream software support and still the powerful features to fiddle with.
However I do find lately that I end up having to fiddle more with my Mac trying to get Unixy things working. Things like X forwarding over SSH by the way - when I moved to Mac XQuartz was still a proper feature - not something open sourced and basically dropped 🙂 I also really don't like the more powerful features of the OS being replaced by "On/Off" buttons which means I have to mess around with plists and config files to get things working again. That's why I moved to Linux for a while but it's still not there yet.
*Thread Reply:* Haha - Emmet and President/Lord Business are some of my best customers!
*Thread Reply:* I enjoy theming my environments. Helps me keep them straight, LoL
*Thread Reply:* So far I’ve got Hooli, Dunder Mifflin, Octan and GoodBurger
*Thread Reply:* Its a good approach. I had some ex colleagues who named test env's after Star Wars locations, people and also Lord of the Rings.
*Thread Reply:* Ha! There are so many good ones… figure, why not!
*Thread Reply:* Indeed.. no reason why we can't have fun at work 😄
*Thread Reply:* We currently use Windows pro here and our intune testing so far is with a similar config.
*Thread Reply:* With windows professional, I'll be able to enable and manage windows defender using Intune (complaince and configuration) policy?
*Thread Reply:* @Tstahl - 'Microsoft Intune managed browser' app as internal browsing solution
*Thread Reply:* @Srikanth , that’s just the browser, not how you allow the traffic internally. Are you using Azure App Proxy, netscaler, etc
Thoughts???
BBC News - Domino's Pizza app must be accessible to blind people http://www.bbc.co.uk/news/technology-46894463
*Thread Reply:* Yeah this exactly... I don't think it should be mandatory if they provide such an easily accessible alternative.
If the app were the only way to order a pizza I'd agree 🙂
*Thread Reply:* Not really... Office E1 licence which gives me the same as my GSuite Business licence is 7.20£
Compared to the new google price of £9.20
*Thread Reply:* Oh damn, I was seeing totally different pricing
*Thread Reply:* Also, is anyone else surprised to see a cost increase after a guy from Oracle comes in?
*Thread Reply:* What i'm giving up though is probably a little storage going to onedrive though
*Thread Reply:* Wow. Need to check and see if the US rates are going to be changing. I really don’t want to make a move, as all our family is on GSuite but money does talk.
*Thread Reply:* @Woody yes, Gsuite rates going up. Effective from April 2.
*Thread Reply:* I use O365 for personal ( 2x accounts) and its around £22 p/m for Business Premium
*Thread Reply:* You can actually get hosted exchange with web-based office only (no PC apps)- thinking about this personally (as I don't need the O365 apps for personal use). https://products.office.com/fr-fr/compare-all-microsoft-office-products?tab=2 Called "Office 365 Business Essentials" for 4.20/user/month
But yes E1 for 6.70/month looks like a good option too.
Can you buy this as a private person though? When I go to "buy" it wants company details etc. I don't have one. But I do have my own domain(s).
*Thread Reply:* It will ask you for a company name, but that's it... No obligation to enter tax numbers or anything.
*Thread Reply:* Thanks! I wonder if the E1 plan comes with intune? That'd be cool - to have my own instance to play with. I suppose that's E3 though.
*Thread Reply:* Afraid you'd need a combo of either e1 plus ems e3 to get what you need.
straight office e3 will give you intune but won't give you aad premium which you need for conditional access.
*Thread Reply:* are we talking intune intune or "MDM for office 365"? intune isnt listed as included here: https://products.office.com/en/business/compare-more-office-365-for-business-plans
*Thread Reply:* @Mirco Reimer https://docs.microsoft.com/en-us/intune/licenses
It’s included in o365 e3. Just remember without conditional access it’s pretty much useless
*Thread Reply:* Actually... Just looking and the cost isn't "crazy".
Office E1 licence is £6 EMS E3 licence is £5.28
So for £11.28 you get exchange online, aad premium (inc CA), intune, and everything you'd need.
Compare that against the new GSuite price of around £10 it's not that crazy for what you get.
*Thread Reply:* I’m wondering if I could change my current subscription to that?
*Thread Reply:* if you're on a monthly subscription then i dont see why not. If you're on an annual subscription then you'd need to wait until the current licence expires before you change.
*Thread Reply:* I decided to go O365 on the weekend 🙂 5 euro including VAT per user per month for O365 Business Essentials.. I have 4 users (family members that share the domain for email and use it very little) so I didn't want to go full E3. As that would benefit only myself. I'll migrate over the next few days (I have to connect to all of them over teamviewer as they're not technical 🙂 )Thanks for all the info!
*Thread Reply:* Can you not mix and match licences, giving yourself and E3 and them a more basic one?
Post migration you could always enrol then into intune so future changes can be managed by powershell commands!!
*Thread Reply:* Good point, I didn't think of that.. Now that I signed up I see indeed that you can assign licenses.. I thought they had to be all the same (wasn't that clear before I signed up). I'll check that out, thanks!
*Thread Reply:* Unlike gsuite which requires using a reseller to get different licenses 🙄
*Thread Reply:* I don't suppose bayton.org is a licence reseller??
I mean... you can supply zt devices.... 😂
*Thread Reply:* It got updated to say "TESTING ONLY" in the name haha
*Thread Reply:* @TedStryker Is this a change you’re looking to make for iOS, Android or both?
*Thread Reply:* @Woody We are mostly an iOS shop. We have Androids (maybe 5%) but they are not "officially" supported so if they had to re-enroll it would not be the end of the world.
*Thread Reply:* @TedStryker so if you removed/updated the SecureHub, would the device continue to be managed via iOS MDM during that time? (my guess is yes)
*Thread Reply:* @Woody I see your point but the issue is that we require devices to check-in in with the SecureHub app once a week. Even if we removed the app and reinstall it they would need to re-enroll again wouldn't they? SecureHub is what Citrix uses for enrollment and policy enforcement.
*Thread Reply:* @TedStryker So, with iOS that’s a little bit of a misnomer. iOS maintains the MDM/Apple management relationship with your EMM… while the “agent/client” is more of a point of presence on the device for the EMM vendor (Citrix/MobileIron/VMW/etc)
*Thread Reply:* So, in theory you could remove the agent and remain managed.. with check-ins being performed via Apple’s native MDM protocol on the device
*Thread Reply:* @Woody I understand but if we removed the app how would the user ever get use of the SecureHub app again for let's say new apps from our SecureHub store without re-enrolling. Thanks for all the help!
*Thread Reply:* @TedStryker It depends. If you removed the app, then re-deployed using a Managed App Config (specifying the identity certificate), the user would launch SecureHub and subsequently be logged-in, etc. If they deploy using their own app container technology, it could be a similar experience. Do you have a sandbox tenant to test?
*Thread Reply:* We have a dev environment. Problem is dev license only allows 5 devices. We can test there but from what Citrix engineering told us, this can have various results. They said they have done it but many would need a re-enroll. They said the last attempt produced a 20% failure where those users needed to re-enroll. Like usual not much help from Citrix and we feel alone in the dark if we flip the switch as they won't support it 😣
*Thread Reply:* @TGR Maybe you have any input?
*Thread Reply:* I'm still new in the slack business so it seems like I've posted my response in the lobby...
*Thread Reply:* Reposting: @TedStryker I've done a few XenMobile installations, so here are my 5 cents. I think Citrx have rethought their plan of forcing all customers to the cloud. You can still get the on prem solution and I've been promised that support will continue. They have a somewhat large customer base of public organizations that also swear to on prem installations (eg. Police and military). They won't offer all features for the on prem version though. Regarding the certificate authentication - I'm afraid you would have to reenroll to use certificate based authentication, but from what I understand, you aren't using the Citrix Pin instead of AD creds is that correct?
@Jason Bayton I stumbled across your test of different Android devices in relation to Android Enterprise (https://bayton.org/docs/enterprise-mobility/android/android-enterprise-device-support/) I'm very impressed - I think it's extremely useful, but would it be worth making it a team effort where others could add in with devices that you haven't tested?
*Thread Reply:* Yes! I'm working towards this by publishing the process I use, and where supported the configs on the EMMs also. There's a LOT more detail I need to define still.
Early on it was suggested I only host devices I can vouch for when I sought feedback and that's what I've focused on, but I'd be keen on expanding this with some form of evidence (perhaps a testing video or such, which I'm also considering doing anyway) of each devices behaviour
*Thread Reply:* I like the fact that all devices can be considered interesting as customers might need them for something other than COSU devices or NFC enabled. I'm testing the Oneplus 5T at the moment and that comes in four different OS flavours (7.1.1, 8.0, 8.1, 9.0.x) and they all behave differently. In 7.1.1 eg. there is no camera app available when the device is setup in device owner mode, but from 8.0 the interruptions that you also mention for the Oneplus 6T start appearing during provisioning. I don't know in which detail this should be added to a report, but as a customer planning on buying a ton of these devices, it might be interesting mentions. But kudos for the work!
*Thread Reply:* The downside to being entirely reliant on OEM collaboration means I don't get as many devices as I'd like and some I have to buy myself (6t case in both points). My approach normally is to update the device to the latest possible and test there. Should I find issues, then the device is updated and resolved, I note in notes a brief "something was wrong, make sure you update".
If I had more time (and made a little money for the hours needed!!) I'd do a report per device as I have done for the 6t and Pocophone, but currently only do those when I have no OEM contact to report issues to.
In the report I'd list the newest build at the top, then in descending every build tested and what was wrong.
*Thread Reply:* Will you have a stall or just visitor pass?
*Thread Reply:* Unfortunately we are only there as visitors
*Thread Reply:* Glad to be part of it ! It’s always very impactful when you can discuss with other industry experts !
*Thread Reply:* Agree @Thibaut Bellon - Living/operating in a vacuum is no fun!
*Thread Reply:* OnePlus isn't an enterprise device, they've got numerous AE issues. What's your EMM?
*Thread Reply:* I can add that we are managing from XenMobile and hence using their implementation of the standard Android Enterprise Kiosk mode when running COSU. After upgrading to Android 9 the Home button stopped working and the back button never gets you to the Kiosk 'home screen', but only back through app activity. The Overview button leaves ghosting on the Kiosk 'home screen'. I went on testing using Google's Android enterprise management API, where I can also enable the kioskmode. In this mode (on Oneplus 5T running Android 9), the Home button and the overview button are missing and the statusbar showing time, signal, battery, etc. has also went missing even though "statusBarDisabled": false.
*Thread Reply:* I know what you're saying about OnePlus not being an enterprise product, but we actually had a somewhat stabile platform with the limitations that running AE on a OnePlus device gives you before they upgraded to Android 9.
*Thread Reply:* @Jeroen J.V Lebon (Open for new opportunities) may be able to offer some XM specific insights.
9 brings a totally revamped native experience for kiosk, I just don't see OnePlus as having done anything to ensure this works properly.
*Thread Reply:* I've had OnePlus test this and they're saying that they see the same thing with a Google Pixel device, which unfortunately I can't test, as I haven't got one at hand
*Thread Reply:* But I'm having a hard time believing that a Google device wouldn't work with the basic management API kiosk mode that they are maintaining themselves...
*Thread Reply:* Pixel is a separate business unit to Android (and AE) so it can happen but I'd be inclined to agree with you
*Thread Reply:* I know. I met a couple of the people in charge of Android Enterprise from Google at Soti Sync in Ireland last year. They are normally really hard to get through to as they don't leave business cards behind, so I had a lot of questions at hand 🙂
*Thread Reply:* But seeing that I never got a business card and that all communication with them must go through the EMM, and that Citrix is not spending a lot of time discussing Android Enterprise with Google, that channel is pretty much closed off...
*Thread Reply:* There are long-overdue changes in the works to make that a little easier going forward!
*Thread Reply:* You mean getting hold of Google to verify or decline issues being related to them, vendors, EMMs or whatnot?
*Thread Reply:* I just received a video from OnePlus showing that a Pixel2XL also has issues with missing home and Overview button and is missing the status bar using the Android Management API kiosk policy... Now I'd love to get a response from Google about this.
*Thread Reply:* Could you output the issue, steps to replicate, policies you applied, etc into a mail and ping it over? I'll be catching up with them later so can bring it up 👍 jason@bayton.org
*Thread Reply:* @TGR I am currently travelling, can you send me a PM with details, i will look at helping you moving on solving this.
*Thread Reply:* @Jeroen J.V Lebon (Open for new opportunities) Thanks, I've sent you a PM.
I'm surprised there's so little activity on this. Loads of us went to MWC last year!
}
Apple stores now selling JAMF!?
Apple Retail offers enterprise-class MDM for the rest of us https://www.computerworld.com/article/3337523/mobile-wireless/apple-retail-offers-enterprise-class-mdm-for-the-rest-of-us.html
*Thread Reply:* Got it. I appreciate hearing the anecdotes!
This tweet by my brother got me thinking about how to do managed dictionaries on iOS and Android—it would be so nice to have https://twitter.com/brianmadden/status/1091671218158256128
}
Twitter
You heard it here first folks! EMM is dead!!
*Thread Reply:* That article could have been written last year and still have made some form of sense. I dont think that guy has spoken to a Vendor.... take a quick pitch from BB or VMware and he'd have had way more to add to this.
*Thread Reply:* I haven’t come across anything noteworthy (yet). However, checking with a couple contacts to see if there’s been any movement in that arena
Don't Give Me a Brake - Xiaomi Scooter Hack Enables Dangerous Accelerations and Stops for Unsuspecting Riders | Zimperium Mobile Security Blog https://blog.zimperium.com/dont-give-me-a-brake-xiaomi-scooter-hack-enables-dangerous-accelerations-and-stops-for-unsuspecting-riders/
*Thread Reply:* Yep. We have a pilot running
*Thread Reply:* I am looking for a document or you can say prerequisite before we implementing
*Thread Reply:* That’s a massive question my friend.
It’s all depending on a myriad of items from how you authenticate your users, what are your network conditions what versions of windows 10 you’re running, who your device provider is.
*Thread Reply:* Authentication - AAD, Windows 10 :1809, OEM :Lenovo and HP.
*Thread Reply:* If you already deployed please share templates or any sheet where you have mentioned your requirements
*Thread Reply:* Hi Simon.. If u have any info please share with me..
*Thread Reply:* Indeed! That LI post was getting a lot of attention 👀
*Thread Reply:* ^Hes been blogging again!
*Thread Reply:* Yes Jason, that posting served the group well!!!
*Thread Reply:* I would like to contribute. MSIntune is my bread !
*Thread Reply:* Hi Jason, I would also like to contribute. I'm working with a Workspace One solution now, and will migrate to a MobileIron one in the near future.
*Thread Reply:* Cool! I think core categories will echo the slack group (#mobileiron, #microsoft, etc). Aim for something between 300-800 words, unless you intentionally want to go long-form. Think about the tags you'd like to go along with it (SEO, no big deal) and I'd say just get something drafted up in Google Docs/Word Online, and I'll get working on a submissions channel 🙂
*Thread Reply:* Will there be a Mac category? If so I'd like to contribute. Most of what I could offer would be in that category, that's why I'm asking.
*Thread Reply:* Great, I would like to start as it interests all of us on the change Apple is going to release in iOS 12.2 with the new method of the management profile installation. Let me try and draft this over the weekend.
*Thread Reply:* Hi @nramos! Fancy seeing you here! 😛
+125 new members this past week. Welcome, everyone! See the notes below from @Jason Bayton, who many of you already know 😁
*Thread Reply:* Not new, but I do look forward for best practice and latest updates on migrations, deployment etc.
*Thread Reply:* Gave this a pin too, hashtag visibility
*Thread Reply:* Looking at knowledge sharing and learn best practices when using an MDM solution and MAM solution.
*Thread Reply:* Looking for experience sharing in migrations from EMM to another EMM tool. Any migration tool available to connect EMMs to assess and proceed for migrations.
*Thread Reply:* @Pierre Michaud What you said:-) I guess some kind of pool to share knowledge. Maybe short descriptions of concrete use-case being solved in a nice an clean way (good security - user-friendly balance). But I am not too familiar yet with slack to know if it can serve as proper medium.
*Thread Reply:* @Ole Daugaard it's an interesting tool. Arguably a forum would be more suitable to fixed areas with these sorts of things, but we're looking at leveraging the website for roundups and resources, both internally and public
*Thread Reply:* @Jason Bayton Makes good sense. But yeah, everybody I know in like tech-startups are using SLACK, and it feels very easy to jump into and get instant response from someone in your team. I just need to get better at focusing on relevant channels, to not get overwhelmed by information. Which website are you referring to? 🙂
*Thread Reply:* Nice! I was unaware of its existence 🙂
*Thread Reply:* yay for the blog. We’re cracking out a ton of content at blog.eucse.com at the moment, more than happy to cross post if anything is deemed worthy! @Charlie @Joe McDonald
*Thread Reply:* Love that idea @Adam Matthews / @Charlie
*Thread Reply:* I think it shows the power of the network to craft our own, but also shed light on the blogs of others
*Thread Reply:* I absolute love trying to get those weird and innovative use cases ticked off and blogging about them! Sharing is caring!! :iloveyouhandsign:
*Thread Reply:* Sure that sounds like a good idea. Theres quite a bit of cross over so a place to discuss general security would help.
*Thread Reply:* Ok, I have a nice juicy article to share 😂
*Thread Reply:* I just tried to, but security appears to be taken by someone or something
*Thread Reply:* Private channel names trump newly created public channel names. Womp Womp
*Thread Reply:* Yah with a dodgy underscore on the end :p
https://www.bloomberg.com/news/articles/2019-02-20/apple-is-said-to-target-combining-iphone-ipad-mac-apps-by-2021 -> Very surprised about this, until recently Apple has been very firm about not wanting to do exactly this...
*Thread Reply:* but that multitasking feature is WOW
*Thread Reply:* Thank you Jason for your guidance on this article!
*Thread Reply:* MDM configured account or just any account? (I’m loading beta 3 now)
*Thread Reply:* Hi Mathew , It is an MDM configured account
*Thread Reply:* I left some feedback as part of the beta. Hopefully they see it in time
@here Taking advantage of the MWC in Barcelona, we wanted to offer to see each other for real 🙂 👇
}
Samsung is working on OEMConfig and has developed a single client library for KME + Zero-Touch https://9to5mdm.com/2019/02/samsung-is-working-on-oemconfig-app-common-client-library-for-shared-use-of-kme-and-zero-touch/
*Thread Reply:* @Paul Troisi While I can’t say much about Okta or PingOne, I can say that MI’s SSO/SAML integration in Core is weak
*Thread Reply:* It seems to be better with Cloud these days, strangely enough
*Thread Reply:* Yeah - Cloud is getting all the love
*Thread Reply:* I just never understood why they enabled SAML/SSO for Admin/User Portals… but not device enrollment flows. I mean, come on…
*Thread Reply:* I can’t speak for Okta/Ping but mainly SAML with Core. As woody said it was done at a VERY basic level of integration. You must maintain LDAP sync for users provisioning, there are few bugs in the way Core handles the request from the IDP. Even enabled with SAML, standard (local) login is possible when a user doesn’t have permissions on the federated account. This allows IMO to do a privilege escalation, so make sure there are NO local accounts with passwords known by other people than the local super admin account
*Thread Reply:* Txs for your reply @NicolasR
*Thread Reply:* So clearly you recommended Okta, right @Paul Troisi? 😆
*Thread Reply:* That is what I am shooting for, but One's pricing is half the cost of Okta. I am trying get justification to go that route. But that is proving difficult to come by!
*Thread Reply:* Sadly, with the MI integration it isn’t going to make much difference
*Thread Reply:* However, I would sell on what’s to come after MobileIron
*Thread Reply:* Oh nice! I've been looking at something like this for a while.. But I'd want it on Mobile as well as desktop, and with centralised storage so I can pick up the messages wherever I'm logged in.. But this is coming close!
*Thread Reply:* I've been trying with Matrix and various protocol bridges, and Quassel IRC with Bitlbee for protocol bridging, but both are too clumsy and messy to set up and keep working when protocols change..
*Thread Reply:* I wonder how they do the Whatsapp integration by the way as they're actively blocking any integration with other services.
*Thread Reply:* How is this not just the next iteration of email? LOL
*Thread Reply:* Good to see you here Yoann ;-)
*Thread Reply:* French community is growing 😂👍🇫🇷 Bienvenue Yoann 😉
*Thread Reply:* Welcome @ygini, great to have you!
*Thread Reply:* Thoughts? Good/Bad/Ugly?
*Thread Reply:* I'd only say try it. I use it casually with the family rather than corporately. It works fine for me on Android
*Thread Reply:* Intune has direct integration into TeamViewer... So would be a nice support flow...
The cost and licensing model seem jenky.
*Thread Reply:* MobileIron the same, haven't seen that actually in use to date though
*Thread Reply:* @Simon Hardy-Bistagne, Intune has the integration but at the relevant licensing and I am not sure it gives a massive benefit. Remoting to a device goes like this: you locate device in Intune, click "New Remote Assistance Session", which eventually will bring TeamViewer application to focus with a invitation sent to the device. The frustrating part is at the customer side, where you have to ask them to open Company Portal and check the little notification flag to accept the remote session. Our support team finds it easier to ask the customer to launch QuckSupport and have the TeamViewer ID provided over the phone, entered straight in the Partner ID field of TeamViewer app. Surely someone out there might prefer the Intune way. Also, while experience on Android is very good, including remote control, on iOS you are just an observer and that's if you manage to broadcast the screen - we experience massive issues till TeamViewer option appears in the Screen Broadcast menu (iOS 12, still to find a consistent solution to the problem). Once TeamViewer option is available in Screen Broadcast, it works okay on following remoting sessions. Lastly, screen capture restrictions affect the app capability.
*Thread Reply:* TeamViewer integration with MobileIron is fine. I had few customers using it. Some others already used teamviewer before deploying MobileIron
*Thread Reply:* MaaS also has the teamviewer integration... and resell... I see a theme here
Has anyone heard anything more concrete about this apparently very serious Chrome vulnerability? This post from a Chrome developer is gaining traction in mainstream media: https://twitter.com/justinschuh/status/1103087046661267456
}
Twitter
Hey @Woody saw this earlier on LinkedIn 😉 https://www.forbes.com/sites/stephenmcbride1/2019/02/08/this-small-tech-stock-has-100-million-customers-and-i-bet-you-havent-heard-of-it/#446e54ad2070
*Thread Reply:* Ha.. now where did I put my investment site login details 😉
*Thread Reply:* They are limited by the iOS management APIs which either let you block sites by their tag as "Adult Content" (which is rather arbitrary) and then blacklist specific URLs in addition to that.
I believe the autofilter boolean must be set to True (which automatically either limits adult content or blocks everything and only allows whitelisted URLs) for the blacklist to work. It is the same way if run in Apple Configurator - the blacklist only appears if "Limit Adult Content" is set
ICYMI: https://www.forbes.com/sites/kateoflahertyuk/2019/03/10/citrix-data-breach-heres-what-to-do-next/
https://arstechnica.com/gadgets/2019/03/the-galaxy-s10s-face-unlock-fooled-by-pictures-siblings/ Not surprised... It's a shame they dropped the iris scanner. Though I never use it much, I'm always a bit worried about the effect of so much IR light in my eyes 🤩
*Thread Reply:* We've been in discussions with Samsung and they say that they encourage users to use the onscreen fingerprint reader. Of course you cannot restrict users from using Facial Recognition unless you are use KME. My company's Risk department has a big problem with this security flaw and Samsung doesn't seem to be "getting it" or taking it seriously for some reason
Sharing @Jason Bayton’s tips/tricks for our newcomers 😀
*Thread Reply:* Thanks, super useful!
*Thread Reply:* How very dare you 😂 :flag_wales:
*Thread Reply:* Ah 2009. When blackberry was relevant.
😋
*Thread Reply:* I have the same one along with certified server specialist and solution designer! Domino or Exchange? 😝
This: http://iosbrain.com/blog/2018/07/05/new-in-ios-12-implementing-provisional-authorization-for-quiet-notifications-in-swift/ is cool
*Thread Reply:* Agree! It’s super useful when they actually do implement. Few and far in between though
*Thread Reply:* Great! Threading this to avoid blowing up lobby notifications for everyone 😁
*Thread Reply:* There are a litany of channels for specific topics. Such as #mobileiron #workspaceone #microsoftintune, etc
*Thread Reply:* Ok thank you. I will look at the channels
*Thread Reply:* @Ash Not at this stage. However this can be achieved using Powershell and reset API scripting.
*Thread Reply:* You should able to use below script to get the last login Timestamp information and then build a login to cloud inactive days. One the logic is build you can then use the POST rest API to delete or disable the account.
*Thread Reply:* $url = Read-Host -Prompt 'Input your server name' $urlMethod = 'Get' $username = Read-Host -Prompt 'Enter the API username' $password = Read-Host -Prompt 'Enter the API Password' $cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $username, ($password | ConvertTo-SecureString -AsPlainText -Force) $contentTypeHeader = 'application/json'
Custom HTTP Headers
$apiKey = Read-Host -Prompt 'Enter the API Key' $acceptHeader = 'application/json;version=2' $headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]" $headers.Add('aw-tenant-code', $apiKey) $headers.Add('Accept', $acceptHeader)
$ws1admins = Invoke-RestMethod https://$url/api/system/admins/search -Headers $headers -Credential $cred -Method $urlMethod -ContentType $contentTypeHeader
*Thread Reply:* This is the basic script to retrive all admin users
https://www.helpnetsecurity.com/2019/03/20/imap-based-password-spraying/
*Thread Reply:* Yes I heard.. We already checked, luckily we have no IMAP accounts.
*Thread Reply:* IMAP on clients that do not support Modern Auth (and MFA) = Bad. Anyone know of a way to allow only certain IMAP clients to access in GMail/O365?
*Thread Reply:* In G-Suite, IMAP is used in two ways:
- Standard IMAP
- What Google calls Google Sync where it’s a mix of IMAP with other protocols You can have control over which one you enable
*Thread Reply:* Thanks @NicolasR - I had been peeking around inside my personal tenant, but hadn’t yet come across the Google Sync entry
*Thread Reply:* oops, couldn’t find a general so figured this was best
*Thread Reply:* No worries I was just saying saying for future reference.
*Thread Reply:* I’ve been pinged a few times for things that really don’t need a tag. Will keep an eye out for now
*Thread Reply:* Don't forget Microsoft MAM-WE (mobile application management without enrollment). I know a little about many of them, but not a lot of depth.
*Thread Reply:* MaaS360 Secure Container is also an option
*Thread Reply:* Blackberry Works was working pretty fine the last time i used it...
*Thread Reply:* I like MAM-WE that Andrew mentioned. MS Outlook does the job well and protects its data. We don't use any others even though we have WS1 we never used Boxer as it's just another dependency 🙂 We like to keep things simple.
*Thread Reply:* Generically, remember that with any container the limiting factor is the container software. What I mean by that is that the only software that will be "in the container" is the software that includes the container software built in.
*Thread Reply:* This isn't an issue if you only care about email.
*Thread Reply:* but if you want to allow things like "take an attachment from email, and let them post it to slack, but don't let it outside the container" it becomes problematic.
*Thread Reply:* So understanding the use cases of the devices is paramount.
*Thread Reply:* Yes if you need to do that it would be better to go full work profile and just only allow apps in it that you want to share things to
*Thread Reply:* Thank you everyone for chiming in. The prospect is primarily looking at usability of a fully-functioning PIM solution. I know some have limitations around notification services, DLP controls, etc. From a usability perspective, anybody have an opinion in terms of ease of use, capabilities and/or gotchas with the solution? What about traction with apps like Outlook or Nine Work vs. proprietary UEM containers?
*Thread Reply:* I can only speak to MaaS360, but we have a full fledged PIM product. We put a lot of focus in our container so we're always expanding around it, but we support all advance EWS functions (native doesn't offer this) like calendar attachments, delegation, availability, notifications, etc. We also support a native like experience to make it easy. Everything from cert auth, MFA, S/MIME is also all supported. On top of that, we offer a slew of DLP controls via policy that can be customized.
*Thread Reply:* Make sure that you're also evaluating document handling. Email is fine, but if I can't open the word attachment sent to me, it'll be a non-starter. I suspect most of them do well enough, but you'll want to be sure.
*Thread Reply:* Agreed Andy! Thank you for your insight Jesus.
*Thread Reply:* BlackBerry Work is a really solid secure container solution - I’ve been using and managing it for around 5 yrs now and it comes from the leader in security. BlackBerry also provides their own native Notes and Tasks amongst other apps and auth is transparent via KCD.
*Thread Reply:* Let me know if you have any other questions !
*Thread Reply:* There are several good PIM MAM Solutions out there. But when it comes functions like SMIME, AIP/RMS, Document view and edit, Kerberos, SAML/OAuth, MultiOS things get complicated. So what are the use cases and technologies the customer wants to use now and in future?
*Thread Reply:* You could also check SecurePIM
*Thread Reply:* We're about to test inTune MAM here. We're being asked by the security audit team on what specific anti-malware protocols are put in place by inTune. We've asked Microsoft but they are essentially sales rep and are giving us a very vague answer. Does anyone know any specific malware functions that are utilized by intune MAM?
*Thread Reply:* I posted in the general thread, but intune mam has no anti-malware capabilities. They partner with companies like mine (Lookout) to provide that.
*Thread Reply:* there is only jailbreak/root detection in intune, but I dont know how good it is
*Thread Reply:* Are you only interested in PIM containers or data protection solutions such as SecureContact X Business https://itunes.apple.com/de/app/securecontact-x-business/id1450074955?mt=8) or GALConnect (Android only)?
Interesting new article by @Jack Madden (includes nice mention of my product) - discuss: https://www.brianmadden.com/opinion/Does-unified-endpoint-management-need-user-environment-management
*Thread Reply:* I never thought much about UEM (User Environment Management) in this context. But I think Jack’s proposal to expose the entirety of settings for the iOS Settings App within AppConfig, for supervised devices, is brilliant. That would set a new standard for centralized configurability and control for organizations that need it.
*Thread Reply:* Thanks, @aaron. I’m sure AppConfig for Settings could get a lot of enthusiasm in this forum. Curious to hear what everybody thinks.
*Thread Reply:* This is brilliant. Who do we need to call to get this started?
*Thread Reply:* Interesting, thanks! I'll have a look
*Thread Reply:* Android and Windows 10 Panasonic Tough books can be managed by AirWatch (Now called Workspace ONE UEM) you can join #workspace_one as well
*Thread Reply:* I think the story would be more interesting if it had actual detail to back it up. The way it is now it just sounds like an excuse.
*Thread Reply:* Hacking is a glamorous term for not so glamorous methods. I bet they used some social engineering to get to them. Just speculation.
*Thread Reply:* Any idea if he has an iPhone or an Android?
*Thread Reply:* Due to Amazon's long standing relationship with and embedded use of Android OS, I'd be a little surprised if he didn't have something like a Samsung S10 - but can't say for sure. He could be holding on to an Amazon Fire phone...but not likely!
*Thread Reply:* Probably don’t ping 700 people to read an article…
*Thread Reply:* For my experience, this community uses threads more than some of the other Slack boards I’m on. I imagine it’s a function of how busy the channels are. For low-traffic channels, threads can be harder to manage. For high-traffic channels, threads are clearly better, even if they are just a little more difficult to use. I don’t think Slack has really integrated threads into the experience, not yet at least.
*Thread Reply:* I know @Woody loves talking about threads :)
*Thread Reply:* All I’ll say is that I agree and as @aaron said, we’re getting there! It’s just a matter of being cognizant that a conversation will be lengthy and responding in a thread should be done from the get-go.
*Thread Reply:* I’m a big thread fan to keep the conversations organized
Saw this post on Linkedin (thank you @aaron for commenting on it). Really interesting insights into scaling management of a specific OS throughout a global user base and having to deal with numerous obstacles in doing so. https://eng.uber.com/scaling-mobile-device-management-at-uber/
*Thread Reply:* What I’m most curious about is how Erik Gomez get’s corporate leadership to back his brilliant ideas. He did equally incredible work at Pinterest.
*Thread Reply:* Justin I’ve copied your post to the #maas360 channel. 👍:skintone2:
Congrats @Jason Bayton https://bayton.org/2019/04/im-joining-social-mobile-as-head-of-android-enterprise/
*Thread Reply:* Nice one - good luck in the new role!
*Thread Reply:* This feels more like something you would want to do with a Compliance Rule. What is your scenario?
*Thread Reply:* Thanks! Though I have to admit that I’m not quite sure which newsletter you’re referring to 🙂
*Thread Reply:* The Android Enterprise Partner Newsletter for April featured a link directly to your article about the enterprise specific features of Android Q
*Thread Reply:* Oh cool! Thanks for sharing!
*Thread Reply:* With Work profile, you are only allowed to allow applications that are on the public or private Google Play store. Google has a habit of denying applications that use remote control APIs to be published to the play store. I’d be interested to know if anyone has found one that is still up.
*Thread Reply:* Hi, the only way to upload the private app in production environment is to change the package name. I confirm you because we had the official answer from Google on this issue.
*Thread Reply:* you can transfer the app from the dev to the production account: https://support.google.com/googleplay/android-developer/answer/6230247?hl=en
*Thread Reply:* Package names can only be used once, and private apps can't be made public by design, interesting to hear if they'll do a transfer but I wouldn't count on it
*Thread Reply:* so can we anticipate a future market of package name selling from folks that reserve package names with placeholder dummy apps for themselves?
*Thread Reply:* I wouldn't count on it. They don't much matter in the grand scheme of things.
*Thread Reply:* Thanks for the reply guys! Will need to change the package name 😞
Just moving this here from AE channel as its a different point. So many of us will have now seen the news are Google's decision to restrict Android licences to Huawei but here is another thought: https://twitter.com/fjeronimo/status/1130361433798189061
}
Twitter
Twitter
*Thread Reply:* The thing is I doubt this a decision Google want to make. Despite their power they still have to abide by the laws of the US and their hand has been forced by the Trump administration when they added Huawei to a list of companies that American firms cannot trade with unless they have a licence.
*Thread Reply:* Oh I totally agree its not a Google decision and ultimately not one that would have wanted at all. The outcome could impact their business as well in the long run.
*Thread Reply:* Hi @Andrew Montague I am good... Trying to take it, all in. How are you ?
*Thread Reply:* Nothing much has changed at the moment, still working hard on getting deployments out of the door!
https://www.blog.google/products/hardware/glass-enterprise-edition-2/
*Thread Reply:* I asked guys at Google for one
They responded "not before us!"
*Thread Reply:* Walmart just did a huge rollout with this, they use it for training.
Best folks in the biz for managing AR with MDM are the guys over at 42Gears
*Thread Reply:* https://www.42gears.com/ they're a partner of ours, we have a few Android-centric clients that utilize their SureMDM, they're doing pretty crazy things in the Android space too, that I don't see any other MDMs having. They talked to us a bit about the VR deployment and are pretty jazzed about where VR is going in the enterprise - I'm sure they'd be happy to chat
*Thread Reply:* To be honest I am struggling with the continuous VMware product name changes as well. AirWatch Browser -> VMware Browser -> WorkspaceONE Browser etc. Even VMware still use AirWatch in some of theirs presentations instead of WSO UEM. I heard “AirWatch” a lot of times during this year’s VMware Empower 🙂
*Thread Reply:* Especially when they still slip this in
*Thread Reply:* I can’t let it go and start calling it with a new name. It took me ages to stop using “android for work” 😁
*Thread Reply:* especially when you can still enroll with AFW#….
*Thread Reply:* toke me a second to realise why I can’t find a channel for AirWatch :face_palm:
*Thread Reply:* I especially don't like the name change because it's confusing for users. AirWatch was a common name that everyone knew. VMware is associated with other stuff and "Workspace One" has absolutely no meaning to people.
Let alone "Intelligent Hub" that is so much less descriptive than Airwatch Agent and confuses the hell out of people who download the WS1 app instead 🙄
*Thread Reply:* Head to https://academy.exceedlms.com/student/catalog, there you will find solid explanation of AE. Should be a good start. I would work backwards from the business requirements as it will greatly influence your choice of EMM and Management Modes.
*Thread Reply:* https://insights.samsung.com/2018/05/09/byod-cyod-cope-cobo-what-do-they-really-mean/
*Thread Reply:* Thanks guys! I found some great industry white papers as well in case anyone needs them:
https://www.telstra.com.au/business-enterprise/campaigns/workforce-mobility-whitepaper
https://www.samsung.com/us/business/short-form/maximizing-mobile-value/
*Thread Reply:* Wowo, I didn’t know that “browse all channels” was a thing—will definitely be useful!
*Thread Reply:* @David I just want to confirm are you using Samsung KME or looking to use Android zero touch. Want to confirm platform for zero touch that is being used and can you confirm the devices
*Thread Reply:* Hi Michael, it's KME on Samsung devices but I know they have integrated the libraries.
*Thread Reply:* Thanks, hang tight, let me pull out a Samsung device to look at and test really quick
*Thread Reply:* @David I just pulled out an S10, reset it, and put my SIM card in there to go through set up. It should give you the option to connect to WIFI, even with an active SIM. Odd, so you not get this screen. Can you send a screen shot?
*Thread Reply:* Yeah normally going via data requires an explicit tap and WiFi should be offered
*Thread Reply:* Also please don’t ping the same message across multiple channels. This would be best placed in #android_enterprise for future ref
*Thread Reply:* @Michael Goad Will have to try again tomorrow, Thanks for your help
*Thread Reply:* @Jason Bayton sorry just getting my head around slack not even sure how to find different channels yet
*Thread Reply:* Np, on mobile and desktop it's the same, just tap/click channels in the side menu
*Thread Reply:* So on my S8 with P I click Go, then agree to the license agreement then it says checking details then show the setup your device screen and EMM client. I can't see anywhere to select a WiFi network and can't swipe down to reveal settings during this process, when does the WiFi screen show up for you?
*Thread Reply:* Remove it from KME/configure and try again?
*Thread Reply:* Really odd, I just don't get that screen, will reset and try again, thanks for the video
*Thread Reply:* Still the same, can only get WiFi page during setup if I remove the sim or the KME profile, might have to escalate, thanks for all the help
*Thread Reply:* Finally got a response from the KC team "So the flow you are seeing is expected behaviour on all P devices. There is a change coming for DO-enrollments in KCS 1.23 where there will be a LTE warning screen that will ask the user if they want to connect to wifi or continue with LTE. This will be only for DO-enrollments for now."
*Thread Reply:* @David F, not sure if this is what you are looking for but SOTI offers a helpdesk solution that's integrated with our EMM solution. Help desk agents can remote control Android, Windows, Mac, and Linux devices and remote view iOS device from within a help desk ticket. If you want more information, let me know.
*Thread Reply:* @Suneil Does SOTI work with ServiceNow?
*Thread Reply:* @Justin Parlette, it does not have out of the box integration with ServiceNow yet. However, we are publishing Public REST APIs in a version to be released this Fall.
*Thread Reply:* You should be able to do that from the Google admin console. Just reactivate the service (which will reactivate that as a billable account) and manually change password
*Thread Reply:* @Matthew Shaver I follow the re-activation bit, but how would I access the acct without being redirected to SSO for our org?
*Thread Reply:* I would create an exception in the SSO settings for that user (since you’ve changed the password and they’re deactivated anyhow, no harm in this that I can think of). Are you using the Google native SSO or a third party identity manager? If it’s via Google you should be able to get in as the user once the password is reset. Third party I guess it will depend on the feature set
*Thread Reply:* BES is still a thing? 😮
I'm afraid not sorry.
*Thread Reply:* i still have a lab environment we have a few banks/law firms using it
*Thread Reply:* Gov contract opportunity (that I don't want anything to do with) and I'm trying to figure out why BES12 is #1 on their Want list
*Thread Reply:* BES12 strenght reside in theirs secure applications, previously nammed Good Technology. Their PIM Client was one of the best in term of security few years ago.
*Thread Reply:* if they are looking to leverage BlackBerry dynamics and their container then there is a potential argument here that it is one of the strongest/secured containers with more functionality than the likes of WS1 Boxer for example
*Thread Reply:* Install a few BES12 last year, i had to read theirs security white paper 🙂
*Thread Reply:* i still have a slight love for BlackBerry deep down 🙈
*Thread Reply:* Those keyboards - I could type blind folded on my old BB 8700
*Thread Reply:* @Ajay Patel encrypted containerization is high on their requirement list - do you have any reading materials or point me in the right direction on how BES differs from WS1 / MI ?
*Thread Reply:* Working on it everyday;) but as mentioned by @JmB the secured containers are the best in securing the data for byod and other methods. I know some government as forced to use the secured containers which where know formely Good Technology before it is aquired by BlackBerry. It is now called blackberry dynamics
*Thread Reply:* not sure how up to date this is anymore but a great starting point
*Thread Reply:* It is still valid. This version is only missing the feature direct connect where you can bypass the noc.
*Thread Reply:* also one of the very few that stands by their On-Prem deployments with cloud being second best (although feature parity has greatly caught up and is typically only 1 release or so behind)
*Thread Reply:* I assume they mean BUEM 12. It is still being used, primarily former BES customers and customers with high security needs. For instance, lightout installation (no internet connection) and BUEM can be set up to without any incoming connections using the still relevant BlackBerry infrastructure.
*Thread Reply:* ya'll are the best - thank you!
*Thread Reply:* Blackberry is really just Good Mobile with new sheets on top 😉
*Thread Reply:* GoodBerry as people refer to it nowadays haha
*Thread Reply:* I always wanted to start an MDM of my own and just call it "Better"
*Thread Reply:* invite me into it and I’ll bin it off 👍
*Thread Reply:* Posted it in #meta
*Thread Reply:* We have a Jedi amongst us 😁, welcome Tu
*Thread Reply:* Working on it @Jason Bayton! Been pretty slammed the past couple weeks. Oh, and 4th/Final kiddo due tomorrow… so #HoneyDo list is at an all-time high
*Thread Reply:* Thx @Jason Bayton! All is well. I’ll get some visuals in #sidebar a little later on
*Thread Reply:* Congrats @Woody! I like how you said Final lol
*Thread Reply:* I guess that this is something you didnt want to post here 🙂
*Thread Reply:* Hi Marc, for Android devices I use Vysor, it's a great tool for mirroring&controlling the mobile device connected to your PC. For recording purposes you need to buy a premium account: https://www.vysor.io/, but for screen sharing options you can use the free version, with adds every 30 minutes or so.
*Thread Reply:* That's an software solution, we sometimes need a real stand. Something like this but more stable/better. https://www.amazon.com/Overhead-Adjustable-Recording-Photography-Broadcast/dp/B07QS412P1
*Thread Reply:* I just use something to prop up a phone and sit the other under it, noting fancy 😉
*Thread Reply:* For $17 I don’t think you can go wrong with that stand you posted Marc.
*Thread Reply:* I talk about it on all my webinars these days.
*Thread Reply:* You may want to move this to #workspace_one for that specific platform.
*Thread Reply:* Which EMM? The Workspace ONE app can be configured with the 'People' function which acts like a GAL of users from your AD and includes phone numbers, email addresses, address, manager and org details.
*Thread Reply:* arf, we work on MobileIron Core 😞
*Thread Reply:* Sorry to hear to hear that! 😄
*Thread Reply:* Maybe a 3rd party app if it's not a feature of MI?
*Thread Reply:* I’d love to learn more about this—let’s connect for a briefing. I’m at jmadden@techtarget.com. I’ll also throw a mention in our Friday Notebook tomorrow.
*Thread Reply:* Would be great for Enterprise-Grade devices, but it would be fairly scary if it was made available to consumer grade devices.
*Thread Reply:* this 1000 times. We have to go fully managed and I am not making any friends saying we have to factory reset and oh, by the way you can't, cloud backup.
*Thread Reply:* I've heard rumors EMM providers working on ways to go from DA to DO without a wipe...
*Thread Reply:* Honeywell provided us with a solution to move from DA to DO. it involved 16 or so steps and 2 reboots. Risk of bricking the devices was to high.
*Thread Reply:* you can do it via ADB, but you shouldn’t do it via ADB. Bad things may happen
*Thread Reply:* The only people who would be able to do this are device vendors themselves. No 3rd party would have access to the low level stuff.
*Thread Reply:* ADB is not an option for a remote device. But i remember looking into it. Again with the help of the vendor.
*Thread Reply:* Adb over ip is a thing. Honeywell is an OEM, not an EMM provider. Did they present a process that works for any EMM that supports AEDO on their devices?
*Thread Reply:* The process was designed specifically for us for a particular type of devices and version and specifically for WS1
*Thread Reply:* That's what I figured. It's funny how varied the viewed responsibility owners are in the industry
*Thread Reply:* Some would think OEM need to solve the problem, some would say EMM providers do, few seem to put the responsibility on Google 🤔
*Thread Reply:* Combination of all 3? OEM + Google + EMM.
*Thread Reply:* Hi @Drew Petersen, strange enough this is the second time this week I hear about that rumour… The first time, the solution was on the Android side. Of course we are keen to investigate further, solving this crcuible for both the Admin and End-User is our game. If you have anything to share, that would be very appreciated 😉
*Thread Reply:* Hi, what about an app running the shell command? I tried today via USB and it seems to work properly.
*Thread Reply:* @Florent N. care to elaborate? What command, what type of device ?
*Thread Reply:* @Dimi I ran the command in this TestDPC issue https://github.com/googlesamples/android-testdpc/issues/48. The device is a Samsung A20e running Android 9
*Thread Reply:* You don’t need a specific app, I think it’ll run in a terminal app without adb shell on the front
*Thread Reply:* @Jason Bayton I mean, creating an app which runs the script, so admin can push the app and it will run the shell command on all devices without physical contact
*Thread Reply:* But that wouldn’t happen. Apps need to be opened, the device needs to be entirely without accounts existing, and doing it this way may lead to data loss as apps and such are removed following the push. It’s risky, not a recommended production provisioning method, and tbh I’d rather my estate was factory reset to start from a clean slate and avoid any flurry of issues where this partially or fully fails.
*Thread Reply:* Sure, it is not a very good solution but for devices like Zebra, you can launch an app remotely. I think it can be done only for device with only in-house app. Do you know why it is not recommended ?
*Thread Reply:* ADB is a dev tool. Zebra already have this capability though.. and as above, far more can go wrong than right
*Thread Reply:* Very strange...Would be great if you could test this!
When adding an account, choose “Exchange server or others”. Tap next.
5) The application will to connect to the server at this time. Tap cancel.
6) Under where your password is, make sure the that server is: outlook.office365.com, if not change it.
7) Scroll to the bottom of setting and you will see “Mobile device ID field”. Tap this 7 times.
8) Where it has “UserAgent”, type: Outlook-iOS-Android/1.0
9) Where it has “Devicetype”, type: Outlook
10) Tap next till the rest of the setting are done.
*Thread Reply:* Ahh I see I didn't know about tapping that option. I looked online for Nine developer mode but couldn't find it there either.
So, I tried it and it allows me to sign in, but my device remains quarantined. I see an email telling me to install the company portal app. This device is already managed by company portal (BYOD) but I presume this is because it knows it's Android - not iOS.
I'll give it a few minutes to see if it changes its mind but it looks like this is successfully blocked on our side.
*Thread Reply:* Thank you for testing this. Could try on a unmanaged device as well? How does your Conditional Access policy look like?
*Thread Reply:* Oops I forgot! Will check tomorrow!
*Thread Reply:* yes and so are several of our team. Full disclosure I'm a CMDSP trainer as we are a partner. Happy to answer any questions on it
*Thread Reply:* Just checked this out, looks interesting
*Thread Reply:* @Paul Conaty I’ll be in touch soon - just validating some training with my boss. Can you deliver the training in France or what are the options ?
*Thread Reply:* sounds interesting. Is there are a study/preparation book or only ILT?
*Thread Reply:* Hi Guys. Currently i only do F2F training in IE but have done remote sessions to groups before although not to multiple locations. @Damian if the group was large enough in France a could definitely come over 😀. Training is normally over a 2 day class with a fair bit of offline study. It's expected that candidates who want to take the exam have at least 3-5 years direct experience managing mobile devices or similar endpoint security experience. I'll drop more detail in here later if there is interest. I also have contacts in a few other EU and US partners who can deliver the training
*Thread Reply:* @Paul Conaty I’ll try to gauge interest with my fellow mobility colleagues. How many heads would you need to justify the trip? PM me your EU contacts too just in case I can’t muster up interest.
*Thread Reply:* Hi @Damian sorry was buried in work for a few days. typically its a min of 3 and max of 8 for a class size. to justify travel expenses i'd prob be looking at min of 5. It looks like all of the EU partners are German based
*Thread Reply:* That cert has been retired ;)
*Thread Reply:* Firm no. It barely has COBO/COSU
*Thread Reply:* I hope he took 3 years DNS record subscription 😇
*Thread Reply:* This is brilliant website. Love it!
*Thread Reply:* This may be a side bar topic ... but what modes does Intune support? (and which ones they don't?)
Does anybody have any experience with Wizy? They tout support for the OEMConfig feedback channel already as well as incoming support for Zebra’s LifeGuard OTA (“Z-FOTA”). They seem like a decent alternative to SOTI for rugged deployments https://blog.wizyemm.com/2019/09/30/wizyemm-world-first-improved-security-and-management-with-android-new-feedback-channel/
@Jason Bayton Need your honest input on our OEM config sometime. Will be great if you could take a look. https://blog.scalefusion.com/supports-oemconfig-for-rugged-devices/
*Thread Reply:* Can you turn off the data driven UI and modify the schema directly? Intune allows for this and I think most superuser EMM admins would prefer that over the data driven UI. I would rather have the ability to copy and paste in a complete config into a free form text box than manually check a bunch of boxes.
*Thread Reply:* We can do it. Question of how many want to do this. If this is a deal breaker we can make it happen. Shouldn’t be an issue.
*Thread Reply:* Why do you have a photo advertising OEM config yet 2 of the 3 devices are running flavors of windows?
*Thread Reply:* Here’s the previous version: https://www.brianmadden.com/opinion/EMM-MDM-MAM-BYOD-Use-Cases
*Thread Reply:* Cool! Lots of colors! Well, perhaps too many colors. I kept wanting the colors to mean something. I see you have shades mean something, so why also use colors to mean...nothing?
Can I recommend using three colors only? Green = “fully supported.” Light Grey = “partially supported.” White = “not supported.” I think that is easier for folks to understand.
*Thread Reply:* I think also “device frameworks” can be split into “android device frameworks” and “iOS device frameworks”. Also, I’d like to have a column where you include example vendors for each type of management tool.
*Thread Reply:* Agree with Aaron, the different colors are confusing. I went looking for a legend to try to grok the details.
Also, being in the MTD space, you may want to add a line item in that section around mobile phishing protection. It's a big talking point for all of us vendors, and I suspect it may be something that may need to exist on devices where traditional MTD may not be considered essential
*Thread Reply:* OEMConfig applies to all enrolled corporate scenarios, not just dedicated/kiosk.
*Thread Reply:* Totally heard re: the colors!
*Thread Reply:* Thanks for all the comments, everybody!
*Thread Reply:* I turned off the sharing yesterday, since I was going to get it wrapped up, but since a few requests for access came in, I turned it back on
*Thread Reply:* I have to test this out on multiple monitors, and run it by some graphic designers 🙂
*Thread Reply:* Great list, thank you! It could be interesting adding possible solutions supporting this scenarios like MobileIron AppStation for MAM, MobileIron Cloud/Core, Airwatch, Intune, blablabla... Just an idea 😉
Maybe it was already discussed, but this was interesting: https://protectyoungeyes.com/12-ingenious-screen-time-hacks-how-to-beat-them/
*Thread Reply:* I'd removed Safari from my kids phone and he found that if he asked Siri a question that required a web search he could continue using Safari unfettered, clever little bugger LOL
*Thread Reply:* Our devs were really interested. I've got a POC coming up for the low hanging fruit use cases. While **nix is a small user base (relatively) it sucks that they're ditching this.
*Thread Reply:* DeX + WS1 + VDI seems like a good balance but needs to be tested.
*Thread Reply:* I use it sometimes with RDP. It's ok but a bit laggy IMO... And this is on a gigabit ethernet connection to the DeX dock, I'm sure it's worse over 4G.
*Thread Reply:* I never tried LoD because I have an S8 but I'm glad I didn't rush to upgrade because of it!
*Thread Reply:* Apparently they had kernel compatibility issues with Ubuntu LTS.. But they always supported multiple distros anyway.
*Thread Reply:* https://www.reddit.com/r/LinuxonDex/comments/d8actp/recent_interview_with_dex_product_manager_gives/f1a332m/
*Thread Reply:* I've heard good things about AnLinux and UserLAnd but they don't have the same integration of course
*Thread Reply:* I enjoyed running Linux on Dex and using a Samsung tablet to adb to Zebra devices :)
*Thread Reply:* tc52 android on custom compiled scrcpy for arm on adb on ubuntu on linux on dex on android pie on samsung tablet
*Thread Reply:* S5e... Was a tad laggy which I thought would be fixed by Tab S6 but S6 didn't have LoD and I knew the writing was on the wall
*Thread Reply:* I'm not in the UK but if it helps you can use my iPad over teamviewer or something. Probably won't help much, I know 🙂
*Thread Reply:* Ha, thank you. But indeed, I’d need something local
*Thread Reply:* Go in an Apple Store, purchase one, do you stuff and give it back saying that you changed you mind. 😂
*Thread Reply:* Good idea actually! Even though you were joking 🙂 Especially if you order online you have 2 weeks to return it (even if you pick it up in person as long as it's ordered online)
*Thread Reply:* I could send you an old crappy iPhone 7 I use for testing every now and again but would only be able to send it out tomorrow for delivery Tuesday. If you still need it PM me your details...
*Thread Reply:* Thanks for the suggestions and offers folks, I just had the company pay for one over the weekend. It may or may not go back, depending how much iOS support I need to do over the coming weeks/months
*Thread Reply:* Well seeing your Nokia crapped, you might want to use it after all 😉
*Thread Reply:* LOL, thanks but I’ve got another 21 Android options to pour through first
*Thread Reply:* Enroll it in Intune with iOS 13 user enrollment; would feel like AE.
*Thread Reply:* I have, it really isn’t. It’s a nice attempt but so far to go
*Thread Reply:* Yeah the thing with having an app only for work or private is a bit of a dealbreaker IMO. Only the built-in apps can do both (makes sense because it's the only way to guarantee separation)
*Thread Reply:* I am to an extent as we use it internally, but I am not an admin.
*Thread Reply:* @Matthew Shaver Have you dabbled much with Workday-as-a-Master and/or the Career Sites/Recruiting?
*Thread Reply:* Alas I have not - we use it for time management - benefits - personal info. We’re not on the platform for recruiting or career paths at this time (as far as I’m aware)
*Thread Reply:* Okay! Working to explore all our options, since we have the Recruiting/Career path modules/platform
*Thread Reply:* No, A8 Will not get Android 10.
*Thread Reply:* The 2015 or the 2017 version? The 2017 version came with Android 8. Enterprise devices get 2yr/2major version updates to 8 + 2 = 10?
*Thread Reply:* Confirmed by Samsung: none of the A8 devices will get Android 10.
*Thread Reply:* Link to the source?
*Thread Reply:* That would be a link to a phone 😂
*Thread Reply:* https://www.theandroidsoul.com/samsung-android-10-update/#samsung-galaxy-s8-s8-and-s8-active
*Thread Reply:* "None eligible for Android 10"
*Thread Reply:* Cant find any official source. I've saw some websites who say that the A8 will get 10... So different sites, different info
*Thread Reply:* I have heard, unofficially, the same: no update to 10.
*Thread Reply:* But when there are 60+ apps we could choose to selectively clear app data and that would make sense doesnt it?
*Thread Reply:* I would not clear app data of apps in use by employees generally. Cache at most with the above caveats.
*Thread Reply:* I agree. Recaching takes a lot of data/network as you have mentioned.
*Thread Reply:* Bayton.org is a good resource
*Thread Reply:* Thanks, I’ll give it a go.
*Thread Reply:* Also, where are you finding difficulty on airwatch? H
*Thread Reply:* I’m looking from something that walks me through things from beginning to end… Console side, Google side, device side. I’m not thrilled with what I’ve been able to find.
*Thread Reply:* This is a great resource https://techzone.vmware.com/understanding-android-enterprise-management
*Thread Reply:* also there is a migration tool in the console if you are moving from Legacy to Enterprise.
*Thread Reply:* Hi, I run bayton.org - let me know if there’s documentation you feel would be helpful you can’t find there and I’ll get it up.
also bayton.org/android is direct link to all things AE.
*Thread Reply:* Take a look at the Google certification/training... it is very good - https://skillshop.exceedlms.com/student/catalog/list?category_ids=677-android-enterprise-academy
*Thread Reply:* Bhavesh and team at WS1 also did a YouTube series that covers some of it as well https://www.youtube.com/watch?v=-VlepQoly5c
*Thread Reply:* Android Series Episode 1: Device Administrator Deprecation - https://www.youtube.com/watch?v=s9-sCtmarpc&t=19s Android Series Episode 2: Android Enterprise Work Profile – https://www.youtube.com/watch?v=NmiJz8ZtRCI Android Series Episode 3: Work Managed Devices - https://www.youtube.com/watch?v=d2LJdtou1ts&feature=youtu.be Android Series Episode 4: Rugged Devices - https://www.youtube.com/watch?v=WoqFCZBM0ko Android Series Episode 5: App Management - https://www.youtube.com/watch?v=DdSE-qFmRt8 Android Series Episode 6: Corporate-Owned Personally-Enabled - https://www.youtube.com/watch?v=HXHjXyiiKLk Android Series Episode 7: Android Enterprise Recommended (AER) - https://www.youtube.com/watch?v=auvEjBsYSVc Android Series Episode 8: Android Enterprise Security Discussion with Google - https://www.youtube.com/watch?v=bOcpyvP3GJI Android Series Episode 9: VMware Workspace ONE Launcher - https://www.youtube.com/watch?v=n5u0nUFXKBw Android Series Episode 10: Admin Experience for OEMConfig Redefined - https://www.youtube.com/watch?v=YPaNCVipeeA Android Series Episode 11: Migrating to Android Enterprise - https://www.youtube.com/watch?v=-VlepQoly5c&t=269s
*Thread Reply:* We have our personal photos, money cards, digital wallets, body health activity apps, self interested social networking apps etc. which actually puts your complete ‘self’ into the smart phone…
Can you tell what info of an individual in general which is actually not available on their smart phone?
*Thread Reply:* Check out the #workspace_one and if I got your question right you need to set Allow Removal - With authorization.
*Thread Reply:* @Al Platt When you create the profiles you can set if the profile can removed "Always", "Never" or with a password
*Thread Reply:* The redemption codes can only be used in the country of your ABM account
*Thread Reply:* This restriction makes the whole redemption code distribution of custom apps pretty useless for us. A feature request to remove this restriction is pending with Apple, so if you can: please add your account/device count to it via the Enterprise Support
*Thread Reply:* Thanks for the heads up, same for us to. We will make a request for the remove as well.
*Thread Reply:* Yes, the lock to a single country is a pain here too
*Thread Reply:* I’m pretty sure it’s brand new. The videos on the bottom of that page are all labeled “coming soon”
*Thread Reply:* I believe this is just a dashboard for them to white label information gathered from the MDM services they resell
*Thread Reply:* ^ That's what it visually looks like. That was my first thought. So something like MaaS360 is feeding info to a VZ Dash?
*Thread Reply:* Yes, but I spoke to someone else who has worked with VZW for a bit and they seem to think this might be remnants of an abandoned project. The UI looks a little older (from what they can see). That might not be entirely accurate - just speculation
*Thread Reply:* Gotcha right on. The UI is older looking for sure - ability to place policies on mobile hotspots sounds intriguing though
*Thread Reply:* Probably just a front end that does API calls to other systems and aggregates data.
*Thread Reply:* We got in there and tested some stuff out. It is piping hot garbage. But if your client has a need to disable the speaker on their Jetpack, boy does it have you covered
*Thread Reply:* This is new to me but vzw has been reselling mass360 for a long while and I wouldn’t be surprised if MaaS360 is the engine behind it.
*Thread Reply:* No need to use the channel command. Also you might want to ask your question in the #workspace_one channel
*Thread Reply:* You need to configure azureAD or adfs as 3rd party IdP and o365 as a SP for Office. Or do you mean the mobile apps? and if yes... Which mobile apps do you want to use?
*Thread Reply:* would need ADFS as 3rd party IdP and O365 as SP.
*Thread Reply:* After integrating the O365 apps in Workspace One access(VIDM), we would like to launch the apps within the Workspace One access catalog (VIDM catalog) and it must redirect to ADFS for further authentication where the MFA should work
*Thread Reply:* Once the MFA is successful we would want it to redirect to VIDM to get the app loaded successful, but the question is does Workspace One Access (VIDM) allows the MFA only at third party IDP end ?
*Thread Reply:* Multifactor authentication can be enabled eg with vmware verify. But in your case the mfa is handled by the configured IdP of the Application (adfs). You have to give it the right authentication in your access policy on vidm!
*Thread Reply:* I have configured AzureAD as a 3rd party IdP in vIDM. Login to vIDM is redirected to ADFS and is using AzureMFA, and the Office Apps are configured in Catalog as Weblinks. SSO is working!
*Thread Reply:* Every person in this Slack works in a field that (excepting BlackBerry) basically didn’t exist 10 years ago.
*Thread Reply:* Fully agree with your first point. As for the second, erm, there I’d have to respectfully disagree with you. Information security has been around for a while now… 😉
*Thread Reply:* @aaron Some of us supported other mobile platforms, like PalmOS and Windows Mobile...
*Thread Reply:* I would typically give the environment a once over and look for gaps. In lieu of gaps I'd point out better ways of doing things and how to do them. Ask them about their approach to security, how they setup devices, where they are in their lifecycle. For Android bring up AER, ZT, etc. Supervision and DEP for iOS. So on.
I did and do still suck at "upselling" as I'd happily just provide the info and steps for things. If they get stuck or want something done it was down to them to re-engage, no pressure.
*Thread Reply:* Hey Dmitrijs, I have always believed in the approach of staying ahead of your prospects need and goals. Not to say you need to be an expert, but by being able to ask the right questions about future strategy with knowledge in your pocket, anticipate where the gaps/vulnerabilities may lie (after review) and being able to take them to the chosen land should they decide to go on the journey. You move the needle from being a consultant to a strategic mobility SME. Position yourself in a way that if the topic is mobility, you should be part of the conversation. Many times, leaders don't know what they don't know and need to rely on people that do. Be that person!!!
*Thread Reply:* I Agree, on the one hand, enhance their current setup (update, usability, security, support, technology (AE, DEP,...)) and on the other hand help them strategically as advisor for feature use (cloud integration, Passwordless/Zero sign on, iOS BYOD, SAML, Changes bec. of new OS,..) before its necessary.
*Thread Reply:* I think it's very important to understand what the business benefits of mobile are and try and become a strategic adviser on how mobile tech can improve business processes, user experience etc. this requires moving the conversation out of IT and security though but ultimately is what my clients find the most value
*Thread Reply:* Can't mention specific customers but I've worked with a number of orgs where we started out as just the MDM vendor and then worked with senior management to understand the strategic goals for the company and related those to mobile to create an Enterprise Mobility strategy. Helping orgs understand whats possible with COTS apps vs custom developed, doing user functional comparisons of iPads vs laptops for sales teams or similar, how mobile can enhance field force productivity etc. What i find customers really appreciate is helping them to achieve stuff like above while also clearly explaining the risks and best practice on how to secure the devices and apps. Most businesses of any size i find don't have this type of expertise in-house
*Thread Reply:* Better version control in Managed Play. Enterprises need to be able to standardize on a particular version of a business application and should have the option to downgrade to a prior version.
*Thread Reply:* Thanks! But I meant things as potential ideas for our team to work on.. Just in case I'm not overlooking something great
*Thread Reply:* Data analysis Data driven decisions Predictive maintenance
*Thread Reply:* Good ideas!! Thanks! We've been improving on our analysis anyway since we got Intune, this is one area where it's way better than Workspace ONE. One of my colleagues has made an amazing dashboard in PowerBI. But at the moment we don't actually do anything with that data.
*Thread Reply:* I thought it was GMT by default but may be set to your console's time zone
*Thread Reply:* That is what even i thought but when I ran historical reports the stime stamps are different
*Thread Reply:* my console version is still 9.2
*Thread Reply:* so when i run reports which has time stamp they are not the actual time stamp of my console or my time zone...
*Thread Reply:* the time stamp in the console will take the time stamp from your device server… dsxxx…
*Thread Reply:* It is off premise
*Thread Reply:* then the time zone in which the server is configured with…
*Thread Reply:* Thank You all for the info
*Thread Reply:* i always thought it was based on the attached image
*Thread Reply:* Folks who use something else, please share with the community.
*Thread Reply:* I would be curious to hear how they expect you to roll out "User Enrollment" without an MDM and Azure AD.
*Thread Reply:* Do MDM with managed iOS mail native and Safari split tunnel. If he hates that, he hates iOS^^
*Thread Reply:* Explain to him risk lability cost without MDM
*Thread Reply:* @Ivo Kazimirs knocked up a solution for us integrated with O365. Might be able to suggest something for you
*Thread Reply:* Most of the native solutions want to see the admin password for the estate, created a bespoke power apps application for a dedicated mailbox. You still have to provide the password to the mailbox on initial set up but after that its smooth sailing 🙂
*Thread Reply:* My gripe has been mostly about providing a 3rd-party a password to an account that’ll see meetings in plaintext. Roombelt was winning opinions but I don’t feel good about anything non-microsoft managing that
*Thread Reply:* We had same problem, powerapps is a feature on your 365 account so you are not sharing with third party.
*Thread Reply:* We were piloting "Teem" eventboard. But it was found to be too expensive for the features it offers, I don't recall the exact price, but it was a lot. It was decided to build something inhouse but it hasn't materialised yet.
I don't know how it worked on the server side as this was managed by a different team but I didn't have to enter any password on the tablets themselves (or deploy it via MDM). They just had to be registered with a pincode.
*Thread Reply:* Ivo would you mind pinging me with work effort and costs please if you’re up for it?
*Thread Reply:* We have started to POC ‘Crestron’ devices in our meeting rooms…
*Thread Reply:* We‘ve been using Robin Rooms for over 3 years now. Did you try that one?
*Thread Reply:* No @Julio that again looks like it expects a 3rd party to have full account access, which I don’t really want. I don’t know what I could do as an alternative (besides @Ivo Kazimirs’s suggestion) but I wasn’t expecting it to require access to an account that normally wouldn’t even have a password
*Thread Reply:* Full account access to what account? We integrated it with Google Calendar and created calendar instances which are doing the communication with the app.
*Thread Reply:* we've just deployed Teams room devices across our business. Whilst it doesnt show whos booked the meeting room from the outside (unless your using 3rd party software) when a user gets into a room, they will see who has booked a meeting on the tablet on the screen. with a simple one click to join feature! if you use teams/365 i would highly recommend exploring these
*Thread Reply:* I'm looking into these already Ajay!
*Thread Reply:* We use Teem Eventboard on 400 conference room iPads. Works great with O365 integration and user proximity detection to check into the room when you arrive.
*Thread Reply:* There could be some desire in the rugged/dedicated device market. A lot of folks feel kind of burned by the premature obsolescence of Windows Mobile/CE that has forced them into early upgrades. These early upgrade cycles have led them to consider alternative purchasing models like DaaS/HWaaS in an effort to better protect themselves in the future. Up until now most of that has been served by way of leasing companies so I think there is still a lot of opportunity out there for true DaaS.
*Thread Reply:* Rufus is a company that comes to mind that is making dedicated wearables for the warehouse space and charging a monthly fee for them
*Thread Reply:* https://www.getrufus.com/
*Thread Reply:* My lens is warehousing and retail so I will be biased toward those usecases but there also is a big need for flexing device counts up based on peak periods
*Thread Reply:* A warehouse often needs to temporarily double its workforce around the holiday season and each one of those users needs a device in their hands
*Thread Reply:* They’re left having to size device counts based on peak volumes which is starting to feel like a foreign concept when software and servers are becoming increasingly self-scaling in the cloud
*Thread Reply:* If you could help solve the problem of flexing device counts based on peak periods via DaaS then you could make a lot of people happy. Not sure where you are from a rugged perspective though
*Thread Reply:* one thing we do is bundling in the MDM solution as part of the package so the customer gets the full works. My opinion is you need to make sure your covering all the point on the attached in your service
*Thread Reply:* the above is based on DaaS for laptops so not the descriptions dont all apply but you get the idea
*Thread Reply:* or create yourown using openstf
MWC looking shaky. I'd be double checking refund options for flights and accommodation!! https://www.wired.co.uk/article/mobile-world-congress-cancelled
*Thread Reply:* Looks like its still on https://www.androidpolice.com/2020/02/12/the-gsma-wants-to-cancel-mwc/
*Thread Reply:* https://www.theverge.com/2020/2/12/21127754/mwc-2020-canceled-coronavirus-trade-show-phone-mobile-world-congress-gsma-statement
*Thread Reply:*
*Thread Reply:* Where would it be hosted in Madrid also?
*Thread Reply:* I believe this was a political response/threat from the Spanish govt in Madrid to the Catalan independence movement/process (‘el procés’)
*Thread Reply:* Yes it was in the local news here a lot that Madrid was trying to bring the event there.. They were quoting the independence riots as a reason but people here told me they thought it was more of a guise to bring a big event there, and a way to 'punish' Catalonia
*Thread Reply:* So far the GSMA told them politely to stick it where the sun doesn't shine but I think they will be in a weaker position now with all the financial fallout from the cancellation
*Thread Reply:* So I wouldn't be surprised if this is the end of MWC as we know it (In Barcelona I mean)
*Thread Reply:* Unless they can claim back on the insurance under the medical emergency clause, of course.
*Thread Reply:* Yes but that will give the Spanish government another negotiating tool because they control that
*Thread Reply:* Either way GSMA is not in a strong position like before
*Thread Reply:* One failed conference surely won’t financially ruin them, they’ve got a bunch of revenue streams and conferences in other parts of the world
*Thread Reply:* Yes but it might be the start of a rotating base (@Simon Hardy-Bistagne mentioned they might be looking to move the event every year)
*Thread Reply:* By the way I've been involved in organising a big (but much smaller than MWC) event before and moving every year is not something that's nice for an organisation because you have to deal with different authorities and regulations every time.. You can't simply reuse your playbook.
So maybe it'll stay.. I just really hope so as I live here 🙂
*Thread Reply:* How about something around May 12 - 14th, when the AE symposium is in London?
*Thread Reply:* Keep me updated, I'd like to join in too
*Thread Reply:* @Jason Bayton Do we have any more details on the AE symposium?
*Thread Reply:* Other than it being in May I’ve no further detail today no
*Thread Reply:* @Mark Vonk What is this AE symposium you speak of?
*Thread Reply:* That is the Android Enterprise symposium hosted by Google. An annual event where new developments are shared by Google. It is hosted for OEM's, manufacturers, EMM's and service providers. There is one in London, not sure if they do it in other regions. Not sure if it's for public consumption yet, but the plans are to host two separate tracks on two separate days, May 12th (Go to market track) and May 14th (technical track).
*Thread Reply:* How did you get this info Mark? I asked a couple Googlers and got shrugs back 😄
*Thread Reply:* Happen to have a call with Google (AE platform team) and this came up.
*Thread Reply:* Awesome. Pretty weird to have two days with a gap in the middle. Guess I need to book 3 days in London for what I'd managed in one last years.
*Thread Reply:* In our internal slack chat I'm an emoji and I'm not mad about it
*Thread Reply:* I think it’s only just you bring that over here
*Thread Reply:* I have not. Looks like it could cover the bases for basic MDM
*Thread Reply:* How did you come across it? Just curious what their angle is at this point in the MDM game. Not a whole lot to go on based on their website.
*Thread Reply:* I think the main angle is being completely free and open source. It's not a commercial product at all. As such it might be handy for managing Apple products at home. Or for smaller organisations without budget for an MDM service.
It's an interesting approach IMO, and when you see how well other open-source tools are doing in this market (consider Munki for example!) I think it's a nice option. But never did try it, no. We're too big for something without vendor support.
*Thread Reply:* Ruchi that’s exactly what I heard from the head of strategies from a big company. Though not commercial it’s like Linux of the MDM world
*Thread Reply:* May be for small businesses but vast ones am doubtful. Hence the query
*Thread Reply:* TeamViewer integrated with Intune.
*Thread Reply:* @techiecheng Notify RDS is a good solution as well. Have had great success with it helping end-users troubleshoot iOS devices. Simple, easy and cost-effective for organizations. DM me if you would like further info on it
*Thread Reply:* its pretty simple with any form of remote assist tools. Teamviewer, we just push out the QuickSupport app and the add on (if needed). they just open the app gives us the ID number and we're in. Few more steps needed for iOS but nothing too stressful. You can deploy unattended access also but quite a few customer's security team did not want this as we are a 3rd party and user privacy etc..
*Thread Reply:* Welcome @Chesky Herskovic! Lots of fun to be had here, indeed 🙂
*Thread Reply:* Hi Paul, agreed its a tough time and more as many of us are spending 24/7 with families. I can only speak for myself but the last couple of weeks have been a huge adjustment for my wife and kids - with the home schooling and that we were in isolation as well due to symptoms. Still we are moving forward and trying to instill a new routine for everyone. Avoiding too much of the news helps as does regular contact with friends either on phone or video. Work helps and yes communities like ours are also a good way to escape the 4 walls. Maybe we should do a Group zoom or similar as a watercooler chat?
*Thread Reply:* This is a challenging time and instead of spending time on the news channels. One should, Talk with your daughters, play with your sons. You need to be a better friend to them than anyone else. This society offers lots of evil friends. Before they make those kind of friends, they need to find their best friend in you.
*Thread Reply:* It's tough for me as my girlfriend lives a few miles away so I can't see her and my son lives with his mother and while he could come here, she is not keen. I do talk to them both but it's obviously not the same. 😞
*Thread Reply:* Love the idea of a zoom virtual pub session (my interpretation as I'm Irish 🙂 )
*Thread Reply:* We actually did a zoom (and also a G Meet) beer session last 2 fridays, but as people sit in fron tof their computers all day (many of them talking to others over G Meet a lot) they don’t find it fun to sit in the same chair, in the same room for a couple more hours...
*Thread Reply:* I'm locked up in the house on my own for 3 weeks now. Very depressed. They won't even let us go out for a walk even keeping distance.
*Thread Reply:* My observation though - a lot of the insitutions are catching up with technology very quickly - schools, pre-schools, government organizations - this is going to be an upside of this whole situaiton. Over the first week of isolation my older son’s school managed to set up Microsoft Teams and start remote classess (twice a day, with home assignments, extra curricular acrtivities and even Physical education - all within the Teams app - installed on an ipad in my case). The other son’s pre-school set up a class on Google Classroom, they connect over video chat on Skype and share a lot of materials on GDrives. The experience all the students, children and the school staff gets now will stay and benefit (I hope) in the future.
*Thread Reply:* @Tycho keep your head up! We will go out eventually - and we will enjoy it way more than ever !
*Thread Reply:* @Tycho take care as spain is most effected country after Italy.
*Thread Reply:* Hey guys glad to hear everyone is holding up well or as best they can in these trying times. While this transition has been a little rough for my wife (shes used to going and spending time with her family weekly) for me I love it as I finally get to work from home and spend more time with both my wife and my dog. I've been a hardcore gamer ever since I was little (got my first personal pc at 5) so sitting in front of a computer alone for hours on end is a part of every day life for me. Sure just like everyone else I would love to be able to go back to normal life but mainly only because I want to go to the store without having to sanitize everything before touching it or take my dog to the nearby water park, etc. I would be down to do some kind of group call with everyone some time its always nice to meet other people doing the same thing.
*Thread Reply:* As an Irishman in lockdown myself in France, I’m up for a virtual pub session which I’ve been doing with our team once a week for the past few weeks. We’re lucky as we live on the Côte d’Azur so sun is a plenty, we have grounds around our house and we have the added benefit of living in a private domain which means I can go out for a run or walk in nature whenever I want. I’ve also been spending some quality time with my family especially my children. Work wise I’ve been flat out actually getting stuff done that was on the back burner...documentation, presentations with other teams...
*Thread Reply:* 🤔 @Damian your quarantine experience sounds quite a bit better than being stuck in rainy Limerick!
*Thread Reply:* Currrent view from the home office ;)
*Thread Reply:* Complete with LEGO gifts from my children 😂
*Thread Reply:* Ok thats a pretty good view considering!
*Thread Reply:* Someone kick this jerk for rubbing it in 😄
*Thread Reply:* My view 😁 It’s great place here
*Thread Reply:* And I did this for my kids today 💪 Stay healthy!!
*Thread Reply:* So you managed to escape Paris like me before the sh**t hit the fan? 😆
*Thread Reply:* @NicolasR Is that a portal to escape to the nether world!!!
*Thread Reply:* Yep 😄 💪 escaped just 1 day before 👌
*Thread Reply:* Hi @Lewis Garton ! How are you?
*Thread Reply:* very good (considering the situation outside of course..) thanks!
*Thread Reply:* Happy to share on social platforms to help drive donations.
*Thread Reply:* Actually @Jay got a tweet out, so just gave that an RT
*Thread Reply:* Thanks @Woody and just retweeted the tweet from Bridgeway as well! Great initiative!
*Thread Reply:* Thanks, guys! @phones4patients is our Twitter handle for this.
*Thread Reply:* if i could get into the office i could of donated a whole heap of Samsung J5 devices 😞! great initiative by the way! I'll see if anyone is going into the office anytime soon and can potentially help
*Thread Reply:* @Ajay Patel That would be perfect for care home patients - a currently much overlooked part of the patient comms challenge. If you can, DM me and we’ll arrange the rest.
*Thread Reply:* @Woody @Jay Thank you - the more we can share this, the faster we can receive and deploy devices
Has anyone started trying this out? https://techzone.vmware.com/blog/what-are-shared-ipads-business
*Thread Reply:* Yeah I’ve tried it briefly. I couldn’t get apps to install. But in general the UX is very cool, just like with ASM.
*Thread Reply:* I wiil be doing a POC for this in coming weeks for already enrolled devices.
*Thread Reply:* This is to allow Guest Mode or Anonymous Mode for quick access without needing to Authenticate
*Thread Reply:* Looks like someone regenerated it 😁
The site that guided many of us through this community has shut down.
https://www.linkedin.com/pulse/eulogy-brianmaddencom-brian-madden
*Thread Reply:* I'm of a similar vintage to Brian and that was a great read if a little scary how much time has passed. Brian madden and exchange experts were invaluable back in my old sys admin days.😢😐😄
*Thread Reply:* Need to understand their business requirements and also look at the “shortest” path to unification
*Thread Reply:* I guess you can drop usb patching 😂
*Thread Reply:* There is a method I like to classify functional requirements:
https://en.m.wikipedia.org/wiki/MoSCoW_method
*Thread Reply:* The outcome should be a recommendation on what is the best approach in their environment, but I'm guessing that would depend on the findings. It's how to gather requirements is what I'm concernd about. How to go about asking the right questions so that no rock is left unturned.
*Thread Reply:* Very useful and straightforward way to think. Helps a lot to synthesize functional/non functional requirements
*Thread Reply:* Yes, very interesting news yesterday. I think this will be most impactful and of concern to the other Apple focused vendors (Jamf, Addigy, Mosyle etc). Others with agnostic platform support may be less impacted.. I would assume Apple will probably add this to their Business and School Manager platforms..
*Thread Reply:* it was only a matter of time the way... i've dabbled with fleetsmith and their iOS capabilities are very good and intuitive platform
*Thread Reply:* It was the plan to add MDM to ASM and ABM. I was working on ASM and MDM was the missing link.
I'm honestly surprised they lasted as long as they did https://www.theverge.com/2020/6/26/21297400/microsoft-retail-stores-closing-cities-open
*Thread Reply:* PWAs, iOS App Clips, OEMConfig with feedback channel, better control of Managed Play app updates.
*Thread Reply:* Any new concepts? like zero-trust, is that even considered emerging tech these days?
*Thread Reply:* What about user enrollment for iOS devices using managed Apple IDs for a partitioned work/personal experience (new for iOS 13 and Catalina)
*Thread Reply:* I've worked with quite a few businesses that the lifespan is based off when a device physically breaks and is replaced. For well-maintained applications, life spans will be based off when the applications take on some major update that will no work on older OS versions.
*Thread Reply:* Have you seen examples of a proactive approach ?
*Thread Reply:* Some companies tend to buy support warranties for the devices (Apple Care for 3 years iOS and OEM warranty for Android) and will track that in some sort of asset management software and have a workflow to replace the device when the warranty expires (either automatically or per user request). That is fairly common for corporate use cases as users do no want to be stuck with old phones.
*Thread Reply:* We do Tablet as a Service (TaaS) and have a lifespan of 3 years. The business entity pays a cost equivalent to the device, assuming some breakage and MDM fees built in. They then also pay 1/3 of that cost each year for 3 years, funding the replacement at that point. Lather, rinse, repeat. For phones, we are moving to automatic replacements at the end of the provider contract to minimize old phones and having so many models to support.
*Thread Reply:* we're a telecoms company in the UK and the majority of our smaller customers tend to do what @Glenn Schultz has said and change at the en dof a contract period. Our larger customers not so much. They need to be more "re-active than pro-active". For example, when a device goes EOL they might change their strategy or if their yearly budgets didnt take into account a device refresh they may wait until the following years budgets have been approved etc..
*Thread Reply:* generally recommend based on availability of security patches so 3 years max for Android (Samsung) and 4 for Apple. Custom applications can really impact device lifecycle though, if they require newer features that speeds up obsolescence and conversely if they are very sensitive to change they slow it down and create potential conflicts with required security patches.
*Thread Reply:* also if your use cases involve rugged cases, mounted devices, car integrations then that can make lifecycles longer as it's more expensive to update a fleet
*Thread Reply:* Normally a userdebug or engineering build will allow this, or root. I can help you out with the former if you like, shoot me a message
*Thread Reply:* An external USB video card will help.
I use one and I can record both DEP and AE deployments from scratch
*Thread Reply:* The same kind of device that the kids use to record gaming sessions
*Thread Reply:* If Mobile device have HDMI output, that’s all what you need. Your PC or mac will detect it as a webcam so you can record or even cast
*Thread Reply:* Oh yeah those too, device needs to support HDMI but I assume plenty of Samsung do
*Thread Reply:* Any special software you use @Raul?
*Thread Reply:* Any software able to record from a webcam will work
*Thread Reply:* I usually record sessions with QuickTime and then I edit them with iMpvie or similar
*Thread Reply:* Got it. I do this on Apple enrollments, flaky on Android. Just good to know.
*Thread Reply:* I have an S10 and with that device I can record the session in HD
*Thread Reply:* thanks Raul will give that a go. Good to know for Apple enrolments too
*Thread Reply:* yeah, but be careful with iOS.
I’ve found that when you want to record DEP, if the device have any adapter attached (I’m using Lightining to HDMI adapter), it breaks the DEP deployment, so you need to unplug and plug again the adapter to see that the provision finish as expected
*Thread Reply:* Some folks using a Code reader gun attached to iPhone have also found the same issue
*Thread Reply:* You could just take screenshots throughout the process on the device itself and then retrieve them after enrollment
*Thread Reply:* you could then splice those screenshots together into a video
*Thread Reply:* Implications = Faster unlock / lower security
*Thread Reply:* i've just re-read this but i dont think this actually matters. All the feature says is that if its enabled, a user will need to enter a password/pin to unlock the device. We push a password/pin policy regardless so even if this specific feature was turned off the device is still going to have a PIN/password
*Thread Reply:* Sounds like a great opportunity @michaelsterl Concur with what @Matt Dermody said. Post in #jobhunters, please 🙂
*Thread Reply:* cool. thank you for pointing me in that direction. (newbie)
*Thread Reply:* Handling contacts in Outlook/Intune 🤣🤣🤣
*Thread Reply:* Mobile Device management is Client Security and Client configuration for mobile devices. I'd start out by looking into client security. What are the risks, and how to mitigate them. The other part is configuring devices.
*Thread Reply:* Thats a cool idea but I’d be very concerned about loss, as you mention above! I’m currently looking at the 5c NFC version they just released. Do you guys use them across the company?
*Thread Reply:* @Jay we're contemplating options for MFA across the board (hourly/salary and for positions where phones are not allowed/etc)
*Thread Reply:* We use 5 NFC and just hang them on sth like this:
*Thread Reply:* we use them to open doors in the office and to initiate vpn on mobile devices
*Thread Reply:* over the last 2 years we haven't had anyone lose thier Yubikey luckily. (I have crashed my 5ci which I carry along with my keys...)
*Thread Reply:* @Bartosz Leoszewski So is the key part of that Trespass unit you showed above?
*Thread Reply:* Or is "5" a manufacturer of NFC? Sorry, just clarifying
*Thread Reply:* I meant we use Yubikey 5 NFC - the tresspass is just a key fob (actually an example I found on google - ours is black and has our comapny logo on it, and the Yubikey is just attached to it)
*Thread Reply:* Ahh, okay. Any Employee ID/Badge as part of it?
*Thread Reply:* Or does the Yubikey 5 act as both the badge (door access/etc) and MFA?
*Thread Reply:* it acts as both - door access + MFA. We are around 50 people - so we all know each other's faces - no need for a photo ID
*Thread Reply:* That's awesome @Bartosz Leoszewski
*Thread Reply:* I need to check and see what options exist for Yubikey in terms of doors/access
*Thread Reply:* one of our large customers chose this solution to control access using a mobile device (Samsung & iPhone in their case) - https://www.ima.cz/products/access-control-systems/imaporter-mobile/?lang=en. We did some consulting for them how to manage this as part of their UEM strategy, and we also decided on the same solution - as it also supports Yubikeys. In case of the customer it is a pretty large implementation - they have over 8000 employees and many locations, so seems to be a trustworthy solution.
*Thread Reply:* That's clean @Bartosz Leoszewski. We're planning for a lot of employees to not have (or not be allowed to use) phones. Hence the original ask
This hit #mobileiron but may be of general interest. https://blog.orange.tw/2020/09/how-i-hacked-facebook-again-mobileiron-mdm-rce.html?m=1
*Thread Reply:* This vulnerability was patched before the beginning of the summer
*Thread Reply:* Yup, but how many have applied said patch? 🤔
*Thread Reply:* My take-away is this: the bad guys are now very aware that MDM exists and is powerful.
Hi everyone.. so thought long and hard about posting this but here goes.. so a friend and I have been putting out our own podcast for the last 7 weeks… a small and steady listener base which is under a 100 currently and we want to grow that. We cover the latest tech news, games, TV stuff and have a good craic… I won’t lie when I say we are working on the production values (and would take any help there).. but its helped us cope a bit with all the crap lately and thought you might enjoy: https://podcasts.apple.com/gb/podcast/jay-karl-the-weekly-tech-rant/id1525937803
*Thread Reply:* and full list of where you can find us: https://anchor.fm/weeklytechrant
*Thread Reply:* We’ll be putting out an Apple Special this week (of course!)
*Thread Reply:* This is great! Thanks for posting Jay!
*Thread Reply:* Here is our Apple Event Special https://anchor.fm/weeklytechrant/episodes/Episode-8-Time-Flies-for-Apple-as-we-take-a-look-at-the-latest-tech-in-our-first-Apple-Event-special-ejti3b
*Thread Reply:* plus Apple Podcasts link https://podcasts.apple.com/gb/podcast/jay-karl-the-weekly-tech-rant/id1525937803#episodeGuid=186f712a-c809-48bd-bff4-a6e6663aa019
*Thread Reply:* I see a Microsoft (as is) one out there
*Thread Reply:* https://mobilxperts.slack.com/archives/C720Y1CTS
*Thread Reply:* Thanks.. and any other group except the Mobile Pros group to recommend?
*Thread Reply:* I’m sorry but my Corp workspace and this one are enough amount of channels for me 😂
*Thread Reply:* I’d love to spin-up one for Okta. I’m always having lots of fun over there
*Thread Reply:* I have a OKTA dev account and an O365 dev account, both free, to play with Access
*Thread Reply:* We also talk about it in the #mobileiron channel 👍
https://twitter.com/MSFT365Status/status/1310696819135901696
}
Twitter
*Thread Reply:* @michaelsterl can you ask your question another way?
*Thread Reply:* let me know if this helps:
thinking of offering the per user model vs the per device model and curious if anyone has 1. deployed the user model 2. any general feedback 1 over the other
*Thread Reply:* We went with the per device model, not user. This came down to costs really. We have > 15k in our environment, financially it made sense. Otherwise, I believe the setup is not really any different from a GUI or end user experience.
*Thread Reply:* There is no difference in functionality, it really comes down to how many devices your users have and are looking to manage. If all users have multiple devices (laptop, tablet, phone) and you are looking to manage them all, it may make sense from a pricing perspective to pay by the user
*Thread Reply:* are you looking to build a bit of a chart on published SLAs for various service tiers per EMM, or more like average response time
*Thread Reply:* this is kind of interesting because we all know response time does not equal resolution time so now i’m curious what the community feedback is
*Thread Reply:* the former, but I'd happily take real world experiences
*Thread Reply:* I'm not writing about or publishing anything, just for my own use
*Thread Reply:* in my experience it completely depends on the type of issue. For example i had an issue with MaaS360 and cloud extender and that ticket took about a day for someone to get back to me. But again same product had an issue with regards to DEP enrolments and they came back to me with the resolution in about 30 minutes. WS1 is good at coming back to start the troubleshooting flow very quickly in my opinion but if the first time resolution doesn't work they are very slow at responding after that.
*Thread Reply:* This is what we had with VMware for WorkspaceOne
*Thread Reply:* Majority of issues were either sev1 or sev2
*Thread Reply:* I've been helping customers in Sweden with implementing and developing EMM for 9 years. Most of my customers are using Workspace One, with that said all vendors I have leveraged over the years have very similar support-solutions unless they decide to go for the higher tiers of support. Even if they have short response times they very rarely solve the issue before its handed over to engineers.
When it comes to partner channels in Sweden MobileIron has always had outstanding local presence and expertise, even though their normal support is just as lacking as all the others.
*Thread Reply:* This is great info folks, thank you.
*Thread Reply:* Workspace one here, i'm on a 5x8 plan with 4 hr service on p1 issues, no complaints, and usually have a reply on lower case issues within 8hrs.
*Thread Reply:* Do we have a baseline for amazing? I got out of bed this morning without complaining about how early it is 😛
*Thread Reply:* That's an ample baseline @Jason Bayton! So long as it involves something mobile/endpoint 😆
*Thread Reply:* Appreciate the suggestion! If everyone got a free account and we added a #Video channel.. I think that would do the trick. I'm a visual learner so I figured why not find a way to share in that format.
*Thread Reply:* I suspect not much will change and will remain like Macs. Saying that seems many vendors are staying tight lipped (disclaimer I work for VMw).
*Thread Reply:* Hi Jay, I used to work for VMware, in Milton Keynes before they closed the old AirWatch office. Now I'm at a partner and I'm excited to see if M1 brings some new management options or if it's the same kind of thing we have at the moment with Macs.
*Thread Reply:* i dont suspect the management mode will change in my opinion. I love the idea that you can run iOS/iPadOS apps, however a lot of big vendors (Google, Amazon, Facebook etc) are not bringing their iOS apps to the Mac App store (for now..) so it could be great for some but crap for others...
*Thread Reply:* @Ajay Patel Yeah I hear that Photoshop isn't going to be ready for M1 until 2021 and I'm old enough to remember Rosetta in the PowerPC transition and how that went. I kinda hopped that the way iPads are becoming more laptops (mouse and keyboard support, multi-window) would start to see a merge to the actual laptops so that, as you said iOS apps could run on Macs. But I guess not just yet.
*Thread Reply:* but if an applicable desktop app is available (e.g. photoshop) why would you want the iPad version?
*Thread Reply:* The documentation for building your own MDM (and the reference for existing MDM’s) is all available in the developer portal (https://developer.apple.com/documentation/devicemanagement) If you are in the Beta programs as changes are released to beta they will show up in here as well (you can change build versions in the upper right corner. )
*Thread Reply:* https://www.docusign.com/
*Thread Reply:* @Raul Looking for a means to sign the document using a certificate issued from a trusted CA. Customer is familiar/has a relationship with Adobe, but I can look at DocuSign as an alternative option
*Thread Reply:* The device isn’t supervised until it’s enrolled with an MDM after resetting the device
*Thread Reply:* Apple doesn’t allow on the fly conversion of devices from unsupervised to supervised without wiping them
*Thread Reply:* Thanks for the reply guys.
So the devices we are trying to manage through intune. Apple configurator resetted device works as I would expect showing as supervised in InTune, can do the full lost device, etc.
A resetted device which is assigned to the intune MDM in DEP is now asking for a username and password at boot up at the Remote Management screen. What should that username and password be? I'm probably missing something really simple here so apologies.
*Thread Reply:* That is the username in the mdm.
*Thread Reply:* Once you pass the remote management screen the mdm handles the enrollment and assignment to a user (if needed) during enrollment. This can be skipped and the device will still be enrolled. To your earlier comments on supervising devices, if they are assigned to an mdm in abm and during the setup are automatically enrolled they will also be supervised at that time.
*Thread Reply:* @Todd Cole You mention the username in the MDM, are you referring to apple business manager or intune?
*Thread Reply:* @Conal Murphy The only time ABM “User name” and iTune would match is if you were using federation. then the Managed Apple ID In ABM should match/refer to the Intune AzureAD ID. Other wise everything after the “remote management” screen is driven by the MDM (Intune)
*Thread Reply:* Cheers for your help guys, I will have a proper test tomorrow and let you know how I get on
*Thread Reply:* Hi guys, made some good progress on this and beginning to get my head around it, so thanks again. One thing that seems to be an issue is getting a new out of the box device registered in intune as a Company device. The policy has been created and assigned to a dynamic group which has the following syntax (device.deviceOwnership -contains "Company") Am I able to register a new out of the box iPhone as a company device before turning it on? I can see the serial number from the Enrollment program token but not in all devices.
*Thread Reply:* The procedure of ABM is very straightforward, and similar across UEMs
*Thread Reply:* Integrate your UEM (Intune / MS Endpoint Manager) with ABM and upload token to UEM.
Assign devices on ABM to UEM.
Create a DEP profile on UEM and assign it to devices synced from ABM
Provision devices
*Thread Reply:* MEM is a kid’s toy, so should be easy
*Thread Reply:* Make sure you have MDM push (APNS) certificate and DEP Tokens configured.
*Thread Reply:* also join #microsoft_endpointmanager channel
*Thread Reply:* That’s a great question. I’ve not seen one up to this point.
*Thread Reply:* Please do let me know if you come across any such requirement in the future… 🙂
*Thread Reply:* Nor I believe will it. It wouldn't take too much effort to be competitive with EMMs and I know they don't want to encroach
*Thread Reply:* I like the Android Enterprise Essentials. Really do. But I don't think businesses will move to this. I think eventually it will end up in the Google Graveyard.
*Thread Reply:* I don’t think so they will decommission this. Until it is active, this community will be active… :thehorns::skintone_2:
*Thread Reply:* I’ve been thinking about the same myself @Boe
*Thread Reply:* I like having all my Workspaces in one app (Slack) so I personally would like to keep it here if possible
*Thread Reply:* Woody did you have to use the word Teams?
*Thread Reply:* I'm impartial @Woody as this is the only thing I use slack for at this point. Everything else I use like this moved to Discord long ago but I get the whole wanting to keep everything in one place.
*Thread Reply:* I’m not impartial. I still have to see the day where no one on my Teams meeting have any issue with the audio or with a crazy slowness
*Thread Reply:* It didn’t have happened yet on a single one
*Thread Reply:* I suppose my only hang-up is once you’ve got everyone in a place.. you’ve got everyone in one place. I don’t mind moving elsewhere, it’s just the fragmentation that can be an annoyance
*Thread Reply:* also the moving of previous threads etc.
*Thread Reply:* @Ajay Patel But it’s not as if these are archived, either?
*Thread Reply:* @Boe Discord was new to me. I feel so old… 😞
*Thread Reply:* no thats true but i have a few saved items from posts that have been really helpful
*Thread Reply:* @Jason we just have the free 10k retention. After that they’re 💥. Agree @Ajay Patel copying/saving convos or files to something like OneNote/Evernote is your best bet.
*Thread Reply:* I suppose the question is if we were to move, where would we want to land permanently and would it provide what we need for now and long term?
*Thread Reply:* previously known as OwnCloud. We are big fans. Cross platform, mobile access, easy share links. And did I mention that it is OPEN SOURCE!
*Thread Reply:* @Matt Dermody does it have to be hosted on-premise?
*Thread Reply:* @Drew Petersen Set it up for us
*Thread Reply:* I think our instance is in Azure
*Thread Reply:* NextCloud is fantastic. We self host but NextCloud offers Enterprise hosting options also.
*Thread Reply:* It's not on premise though, it's in one of our cloud VM clusters
*Thread Reply:* @Drew Petersen Great to have you here!
*Thread Reply:* So I’m going to assume it could run on a VM certified in GovCloud. Yeah?
*Thread Reply:* yep - they have lots of security certifications and reports posted on the website. it’s solid software.
*Thread Reply:* Mr. Bayton will probably have something to contribute once he sees this as well as we’ve seen him contributing on the NC forums
*Thread Reply:* Although I imagine a lot of us are in the support and maintain mode rather than trying to deploy anything new right now
*Thread Reply:* I saw it at LinkedIn CyberSecurity Hub and indeed it’s quite impressive
https://www.mirror.co.uk/tech/breaking-gmail-google-youtube-down-23164823
*Thread Reply:* Merry Christmas to you and yours, @Ajay Patel! Looking forward to a happy and prosperous 2021 🥳🎅:skintone2: 🎁
*Thread Reply:* Merry Christmas Woody, and to all of you contributing here!
*Thread Reply:* I have stamps! Merry Christmas
*Thread Reply:* Merry Christmas @Woody. Nice family! I'm sure the kids are super excited for tomorrow!! (mine are!)
*Thread Reply:* @Ray Domingue Thanks man! They’re pretty stoked. I’m just thrilled we made it to this point, since we’ve been home/distance learning since the spring. Santa--bring it!
*Thread Reply:* Merry Christmas Eric and all who have been so kind and patient 😁
*Thread Reply:* Merry Christmas @Woody, all the best to you and your family.
*Thread Reply:* Thanks @ZL! Merry belated Christmas to you all as well. Oh, and a Happy New Year!
*Thread Reply:* @Woody apologies for late reply but hope you all had a great Christmas and Happy New Year! Great card by the way :D
*Thread Reply:* Thanks @Jay! Going a little stir crazy at this point but that all should change tomorrow 😜
*Thread Reply:* As someone with 4 kids also, I fully understand that 🤣 I’m looking forward to getting back some form of routine tomorrow!
*Thread Reply:* @Jay feel free to share any tips you come across 🙂
*Thread Reply:* Happy New Year to all! Heres to a better one (hopefully)!
*Thread Reply:* Welcome @Sherman Chen! Long time no speak 😉
*Thread Reply:* The 7-day 2021 preview ends today. I’m still deciding whether I want to cancel and get my money back 😉
*Thread Reply:* Thank you @Leon !
*Thread Reply:* Welcome @Peter van der Woude! I was checking out your Blog earlier and thought.. this guy would love the community. Way to go @Leon 🙂
*Thread Reply:* Thank you @Woody !
*Thread Reply:* Thank you @Jon Henson !
*Thread Reply:* Love this and echo the exact same sentiments @Prip! I was just telling someone tonight how going it alone is no fun. Proud we’ve amassed such an amazing group of folks from all around the world. Cheers to years of fun (and some 🍻 when we finally get a chance to meet)!
*Thread Reply:* I too echo the same....Happy to be a part of such an amazing mobile experts here from all around the world. I believe we all learning and helping each others together.
*Thread Reply:* Appreciate the sentiment @Prip! Likewise, thanks to everyone responding to my questions and great to be part of the team.
*Thread Reply:* Thanks for the shoutout @Prip and to all the other fantastic people on here. It’s what makes the community so good!
*Thread Reply:* Thank you @Prip! It's been a wonderful journey.
*Thread Reply:* Wow! I’m just honored to be included alongside the other names on that list. This is a great community!
*Thread Reply:* Same I'm not sure I deserve to be mentioned along side the greats but I'll take it anyways 😄
*Thread Reply:* Thank you for the mention @Prip we have a great community here!
*Thread Reply:* The beauty is that you only need to help once and people will remember you. They might have tried to resolved a particular issue for days and you helped to resolved it. Just throw your ideas out there.
*Thread Reply:* Don’t mean to hijack the thread but after scouring the net for an app that could meet our needs for a corporate phone book, I should mention @Peter Mohr who advised me on a great app developed by his company that we are more than likely going to roll out in production if all our testing goes to plan. It’s great to see this group contributing to something like this too!
*Thread Reply:* Thanks @Damian Anyone can join the fun a give the app a go:
https://apps.apple.com/dk/app/corporate-phonebook/id1255925033
Works with any Office365 deployment
*Thread Reply:* That’s slick @Damian and @Peter Mohr!
Anyone here using Okta? Started an Okta Pros Discord, if you’re into that sort of thing. https://discord.gg/yQKRaSTCUq
*Thread Reply:* Was just going to say.. this is a interesting poll! Discord is good but the workspace integration with Slack is what I like! 1 App and for me 4x workspaces all easily accessible!
*Thread Reply:* and Discord is free for such Workspaces with the speed and user-friendly mode of Slack… and yeah @Jay’s point also, I have 5 workspaces at 1 place that I can quickly switch between…
*Thread Reply:* I’m in the same boat @Jay and @Prip. Though at this point, I have more entries in Discord than I do Slack. I just don’t get the warm and fuzzy feeling about Slack like I used to.
*Thread Reply:* I know what you mean, something has changed and I can’t put my finger on it either. I find at work I mute so many channels now due and focus on key ones.
*Thread Reply:* I like that we/one of our vendors could sponsor Nitro for $99 a year.. and anyone in the server can “Boost” to support it
*Thread Reply:* Thats a pretty good idea. Shame Slack doesn’t have a “sponsor” plan!
*Thread Reply:* Yeah / They just rob you up front to avoid all the nickel and diming 😭
*Thread Reply:* I personally think Slack is gonna die off at least in its current form and sooner or later we will probably need to make the move to something. I use Discord for tons of other stuff so I would rather see it move there but I know not everyone is gonna feel that way. Also I don't think Discord has the data logging cap that Slack has were free accounts can only go back so far.
*Thread Reply:* @Boe you and I are on the same train of thought 🚊
*Thread Reply:* I mean I use it a lot lol probably too much at this point but the service is just so convenient but for use cases like this and other community based groups and of course gaming with my friends 😄. This Slack community is the only thing I use slack for every thing else I was in moved to discord awhile back.
*Thread Reply:* Okay, you win a prize for that @Boe!
*Thread Reply:* The way I see it, we’re IT people and are used to migrations. Yes, it would take some time but in the long haul seems to be the trend in where Communities are going.
*Thread Reply:* Woody I love your optimism! 😜 So who’s putting in the change request and planning the downtime and DR.
*Thread Reply:* I agree Woody as a service is far more popular these days and has a lot of great integrations for both admin management and also just hosting virtual meetups and what not. Also like ya said you people can choose to boost the server if they want to improve things like video and audio quality and what not. Also its seems like they were targeting people considering moving with the new Community Server option. https://blog.discord.com/discord-is-for-your-communities-3d14464d4c7b
*Thread Reply:* @Jay spinning the wheel ’o requesters now…
*Thread Reply:* I am new to discord so I’m not sure how I feel about the move. Isn’t it more geared to conversation rooms with live audio? I feel like if we moved away from chat to live audio that we would lose out on a lot of conversation history, especially since we span so many timezones.
*Thread Reply:* Am I thinking about discord the right way, or could we just use it for the chat functionality?
*Thread Reply:* I guess my concern is if it caused a cultural shift to voice channels we would miss out on our historical discussions and the searchable archive
*Thread Reply:* granted our searchable archive is limited by the 10K limit in Slack right now
*Thread Reply:* @Matt Dermody as Woody pointed out you can build the server however you want it. You can offer a mixture of both or strictly one or the other. Also you can set it up just like you have it here where users can give them self's roles which enable them to see different channels/topics they want to participate in so they don't have to see all of them. There are a lot of great features on the platform and I could be wrong but I would be willing to go out on a limb and say its being developed for more actively then Slack at this point. There are pros and cons to both platforms at this point but I wonder how long Slack will stay around as a free product now that they have been acquired.
*Thread Reply:* cool, I’m changing my vote in the poll then!
*Thread Reply:* I'm no guru on discord but would be happy to get on a call with whoever and discuss what I know and how to set things up if needed
*Thread Reply:* Well said @Boe. I would echo all of that.
*Thread Reply:* Thanks Woody, there are a lot of smart people who run this slack channel so I'm sure they could adapt to the world of Discord quick enough if the powers that be deem the switch worth it 😄
*Thread Reply:* I would almost say we stand a Discord server up to offer folks a chance to get familiar and make sure it meets all our needs (before making a final decision)
*Thread Reply:* been using Discord for a while now, but still have not used it for anything work related... feels like im falling behind
*Thread Reply:* @Camilo Lotero I don't use it for anything work related either currently but a number of hobbies I'm into (custom mechanical keyboards, audio, etc) all leverage Discord a lot so I've become very familiar with it as well as I have my own server I use for interacting with both IRL and online gaming friends. For better or for worse its pretty much a house hold name at this point.
*Thread Reply:* For awhile it felt like everyone was going Slack… so it was cool to try and have actual FT Work and Hobby (Mobile Pros) Workspaces all inside Slack. Now that Slack is “growing up” I think it makes more sense to continue letting the businesses continue providing Slack, but to move all hobbies/communities/forums into Discord. Mostly because of the uncertainty of Slack’s future regarding free entities.
*Thread Reply:* The issue with discord is that you cannot use multiple identities in the app. Unless I have missed something 😏
*Thread Reply:* @RJ honestly for all of my “personal” endeavors I prefer one sign-in. For Slack being enterprise-aware it makes sense, but on the personal side just adds extra confusion.
*Thread Reply:* Following on from discussions yesterday. What was the consensus around testing the water with a Discord server?
*Thread Reply:* @Jay there is one currently being tested but you have to know the secret hand shake to get it 😛
*Thread Reply:* For those wanting to check out Discord, pasting the link below. Disclaimer: We’re just kicking the tires/comparing functionality. No plans to make a move at this point.
*Thread Reply:* https://discord.gg/76nqpQPKwH
*Thread Reply:* There are some fundamental differences that make me not want to use Discord for anything work-related
*Thread Reply:* I use both platforms very extensively and have lots of slack workspaces and lots of discord servers - but i also have lots of DEVICES. mobile, laptops, desktops
*Thread Reply:* with discord, no matter where you log in, you get everything
*Thread Reply:* with Slack, you can choose which workspaces to add to each device - so I have Mobile Pros on my work MacBook, but not on my personal desktop, etc
*Thread Reply:* Wait you separate your personal life from work life what is this craziness you speak of :D
*Thread Reply:* @Drew Petersen all good points! I personally like everything sync’d across the board. That way (which ever) life throws something, I can respond accordingly (not having to run to the basement to grab a specific device/etc). At this point in my life that just works better.
*Thread Reply:* Boe - it has been a gradual move over the past couple of years. The blurred lines was not sustainable. I feel like it comes in tiers almost - would be curious for your feedback given you are all high performance tech professionals:
- New position or new hire, not quite involved enough to lose the personal life to work projects
- Hungry and curious, start jumping into lots of work threads after hours because it’s fun and you are learning and feeling valued. Coworkers and leadership comment on how passionate you are
- Your entire life is now your job. Family, friends, hobbies are no longer a priority. Your career is your identity. You are the one in your group who is jumping in to answer as quick as possible. others start to defer and wait for your help because you are good
- Because of #3, burnout starts to set in. Vacations are essentially non existent because you still check email and slack when you are supposed to be on PTO. Work isn’t fun anymore because there is so much you have to deal with based on the reputation you have built in #3
- You start to try to take REAL time off to get refreshed and realize if you just unplug completely for a few days, you come back to rediscover the passion you used to have in #2
- Find that perfect balance of work and life so that when you are at work you can be hungry, passionate, curious, effective and when you take time off, you can focus on outside fulfillment with family, friends, hobbies
*Thread Reply:* @Drew Petersen 1) I agree 2) I agree, but only because I love learning in general. I have an RSS feed setup which is configured to feed me information about personal interests along with work interest, so I pick and choose what i read but I get a mixture of everything daily. I personally feel like to be successful in any I.T. career you are going to have to put in some time off the clock continuing to learn and grow. 3) I fall into the last part where I will jump in and answer when I know the answer, I have never let work be my entire life or identity though and I am just as happy to sit back in listen and learn when needed 4) Yes, I am guilty of checking email while I am out of the office, let us be honest we all do it 5) I think this applies to everything, I take breaks from all my hobbies as a way of resetting and refocusing every couple of months 6) I think I am currently in that stage now As for the whole lets only put a work app on a work device and personal on personal, I guess that is where we differ the most. First because I primarily manage BYOD device so that throws the separation idea out the window all on its own. Also, for me I turn off notifications to work based stuff on my phone, so I only see them/check them by my choice that way they do not interrupt me during my down time. As you can see from the screen shot, I shared before I am in tons of Discord servers but the only server, I get real time alerts/notifications from my personal server all others are muted and require me to check them when I so desire. The same goes for slack while its on my personal phone all notifications are turned off, so I only see things when I choose to launch the app and check the. I will say that I can appreciate the separation idea and I know it’s required for some as the temptation to check things all the time can be hard, but I think that ties back to your point #6 and learning what a good balance looks like for you personally as everyone will be different. Hope all this makes sense.
*Thread Reply:* It does! Love the feedback and different perspectives. I have also used muting and selective notifications to help prune down
*Thread Reply:* Muting is a must the flow of constant information and simulation is just way to much these days. Very few apps on my phone both personal and work are able actually notify me. I think I would have gone insane being stuck in side with this covid crap had I not done that
*Thread Reply:* I don't like Discord very much (even though I'm big on gaming). It's yet another walled garden that may be monetised in the future. Right now they don't because they want to grow. Once they have a majority of the market like slack does now, I'm sure they will. Also, their ties to tencent are a drawback in my view.
Moving to a Matrix server would be nicer IMO. It would be completely free of commercial concerns that limit us so much here on slack. And from one Matrix server you can join the entire Matrix world.
Anyway these are just my 2 cents 😉 If we move to Discord I may just bridge it to Matrix on my side.
*Thread Reply:* PS: I do think blurring lines is between work and personal is sustainable.
But for me my work is also my hobby. I really love having very little separation and it's always been like that for me. No burn out or anything 🙂 For me the weekend often means hanging out at the makerspace working on other tech stuff 😛
Also, I live alone so that probably makes this more sustainable.
*Thread Reply:* I guess I would argue Tycho that they already are monetizing it with things like Nitro and I personally don't see them moving away from there current free model but I do know they have plans to add in more options that will be monetized. Then again I'm biased as I have insider knowledge since a childhood friend is a dev there. I'm the only one of my friends that never got into coding maybe one of these days I will but I'm glad they did because a number of them work at game studios for games I play and as the kids say "skins = wins" and I get plenty for free thanks to my friends 😄
*Thread Reply:* Also I'm open to whatever everyone decides I have no stake in this fight, never heard of Matrix servers before guess I got something new to learn about now 😄
*Thread Reply:* Matrix is an open decentralised chat network very similar to slack. You can host your own homeserver, and channels propagate through the network. You can use many clients but Element is the biggest one. I don't mind monetisation by the way. But it leads to lock-in. And the way Slack does it (with a significant price per user) it's just unaffordable for a community like us.
What I like about Matrix is that it's really open, not just open source like Signal but the network is fully open and federated as well.
And it's very light, you can host it for peanuts 🙂 Even though you don't have to, you can use public servers too. And you can have bridges to many other networks.
PS: I don't view this as a 'fight' 🙂 @Boe Just raising what I believe is the most unencumbered solution. However I will follow if the community decides they will move somewhere else.
*Thread Reply:* Just a reminder if anyone wants to experience what Mobile Pros would look like on Discord, here’s the link: https://discord.gg/xvWfMPEjen
*Thread Reply:* If the community were to move I'd look for something open source and self-hosted. Moving from one walled garden to another - which could easily also suffer the same takeover fate, doesn't make much sense to me.
Two considerations when I think about it -
- Moving conversation history, beyond the 10k which "should" be possible
- Losing many members who visit infrequently and won't move over.
*Thread Reply:* Looking at something like Rocket Chat, which emulates Slack considerably, an import of the public channels will transfer roughly 50k of 113k messages, which means 60k are spread out across DMs and private channels; the private channels could be gotten around by making them public temporarily working with the private channel owners, the DMs would be lost.
*Thread Reply:* I ran a Rocket Chat server for some time internally at my company a couple years ago. We kept hitting the limits in Slack free version so having a self-hosted option with no message or file upload limits seemed logical. It looked nice, very slack-like and the apps were nice. The web interface worked well for folks who didn’t want to install the app. But… I couldn’t get people to use it over Slack - even though we were severely limited on the free version.
*Thread Reply:* Eventually we ponied up for the paid version of Slack and it was retired with very little use.
*Thread Reply:* Can we crowdfund Slack for ourselves? I would pay a couple bucks a month to keep this community going
*Thread Reply:* Totally could. Could also seek sponsorship from industry outfits. Plenty of options!
*Thread Reply:* It took me awhile to warm up. But then I started adding more servers into the single app.. and the enjoyment of that led me to accept the UI
*Thread Reply:* Old.. nah! Perhaps having one of the senior moments we’re entitled to.. but don’t go there with that Old talk!
*Thread Reply:* @Jason https://discord.com/
*Thread Reply:* Oh yes, thanks. There’s me looking for it on the macOS App Store. Silly me.
*Thread Reply:* No worries we all have our trained bad habits 😁
*Thread Reply:* I too have the habit of typing before I look… then deleting said typing
*Thread Reply:* lol listen its not my fault this dinosaur of a program doesn't translate emoji correctly if you don't hit the spacebar after entering it 😛
*Thread Reply:* must have been that linkedin post!
*Thread Reply:* My preferred is SOTI because I deal primarily with rugged Android dedicated device deployments of Zebra & Honeywell.
My least preferred (arguably hated) is Intune/MEM because I deal primarily with Android dedicated device deployments of Zebra & Honeywell 😂
I’m somewhat of an outlier here, but its great to have a community with a bunch of different perspectives.
*Thread Reply:* from using the many different vendors over the years i have to say my favourite is Workspace One. The feature set and responsiveness to new technologies has always been impressive. Support has lacked a bit but that's the same with any major vendor. I think it definitely has the best UI I have seen out of any. Again same as Matt my least preferred would be intune/MEM but im using this more and more on a daily basis with my customers who are migrating their infrastructure into the Microsoft Cloud.
*Thread Reply:* WS1 is pretty great for my use case as well, probably my 2nd favorite EMM. Certainly more capable as a corporate wide EMM than SOTI. It’s really unfortunate to see just how many WS1->Intune migrations are happening right now.
*Thread Reply:* @Matthew Jones oh what have you started. Obviously it is Intune, because it is a true UEM and has native integration into all other MSFT products. You can’t get that level of integration anywhere esle.
*Thread Reply:* Identity - Azure AD, Defender for Identity, Privileged Identity Manager, EDR - Defender for Endpoints SIEM - Sentinel DLP - Azure Information Protection CASB - MCAS You can achieve Zero Trust with a single vendor.
*Thread Reply:* ZL, what about ACTUALLY managing devices though? It’s almost like UEM got so far away from EMM that it barely even does MDM now!
*Thread Reply:* MDM/MAM UEM it has everything that majority of customers need. If you going through transformation and O365/M365 it would be silly not to use Intune in some capacity or another.
*Thread Reply:* I agree that direct file placement is lacking , but that can be mitigated with app redesign.
*Thread Reply:* I predict that half of MDM will go out of business in next couple years. There are not enough Intune engineers in the consultancy that I work for, they pay £5k referral bonuses for consultant/arch level resources.
*Thread Reply:* I try and lean towards whatever is most suiting to the customer’s needs. My personal preference these days is MobileIron, WS1 and Intune. As @ZL said, many are folding so the best solid you can do for a customer is to get them into a boat that isn’t going to sink.
*Thread Reply:* I don't know as of today probably WS1 but then again I have been around a while. I still am partial to Blackberry. Curious to see what it looks like now. Good was today's Intune. Now that Brad Anderson has left it will be interesting to see if they speed up or slow down on innovation
*Thread Reply:* MDM - prob WS1 although I have a soft spot for MobileIron's UI! UEM - prob MEM as ZL has laid out. When it comes to managing W10 and iOS, Android in a single plane with O365 and Azure integration it's hard to argue against
*Thread Reply:* From an technical perspective (and personal) I prefer MobileIron because of the UI and customer support. I’m not sure what support looks like for them since the acquisition, but prior, it was far superior to WS1. Having worked intensely with WS1 for the past year, and having worked with it many years ago, it’s kind of a train wreck from a bug and support perspective. Also, recently delving into InTune as a result of migrations from WS1, it seems to have a lot of limitations, particularly from an internal Android app perspective. From a customer/client perspective, I agree with Eric, in that there is not a one solution fits all, but if I had to recommend one solution only, it would probably be WS1 because of its features and capabilities. Plus there is the bonus, because it’s buggy, of job security. 🤣 And a second bonus for those working migrations to InTune that they will probably end up migrating back to whatever survived, most likely WS1, MobileIron and ?
*Thread Reply:* To piggyback on this question, if you were deploying a device (think Zebra TC52) which must be locked down to kiosk or single app mode, would you choose MobileIron, WS1 or Soti? The devices, when deployed, cannot be updated or altered in any way for anywhere between 6 months and 6 years and are essentially a data collection device. Additionally, what device would you choose to accomplish this?
*Thread Reply:* Also, could luck not altering them for that time frame. We tried applying that concept from legacy Windows CE management to Zebra Android devices and eventually gave up. Rugged devices will eventually get damaged and repaired and replaced. When that happens they almost always come back with a newer OS version from Zebra which may not be able to be downgraded, especially if they have changed a component like a display or a camera, thereby requiring a new BSP. Android, even in the rugged space, requires a lot more of a active management strategy than a “set it and forget it”/“Golden Image” strategy that we used to be able to employ
*Thread Reply:* SOTI Cloud is at least locked in on a given MobiControl version and will stay on that version until you request an upgrade since it is all single tenant. You can also choose to host it yourself. That way you can at least ensure that changes to the EMM itself arent forcing changes to how you manage the device inventory.
*Thread Reply:* WS1 on the other-hand is a mulit-tenant cloud environment that is regularly updated out of your control. A future upgrade to WS1 could break compatibility with say a Android 8 TC52 if you’re planning on running them for 6 years straight without touching them.
*Thread Reply:* I don’t know enough about Mobile Iron to speak to it.
*Thread Reply:* These would be clinical trials devices, so changes violate regulations. I can already see that the OS updates are going to be an issue. I’m not sure how that is going to be managed or avoided. Mobile devices were never intended to last that long.
*Thread Reply:* Great point about the WS1 multi tenant and auto updates.
*Thread Reply:* Zebra mobile devices ARE intended to last that long actually. They have great maintenance plans, and long term support models from the manufacturer. They will last, but keeping them configured exactly the same will be a challenge over that time frame .
*Thread Reply:* Beyond OS updates there are potentially other OTA updates to system components like WebView that could be coming from Google Play relatively out of your control. This can be problematic if whatever business apps that you’re running are dependent on WebView as that becomes a loose variable.
*Thread Reply:* just to chime in on the WS1 piece, you do have the option of dedicated SaaS as well it just cost more but you are in control of when it gets upgraded etc in that scenario as its dedicated to just you 🙂
*Thread Reply:* not having your tenant or devices upgraded in 6 years
*Thread Reply:* I don’t thinks this is technically possible. Unless its a Win10 Long-Term Servicing Channel
*Thread Reply:* one of the uses cases is medical devices.
*Thread Reply:* I’m not sure we could lock everything down as required with InTune.
*Thread Reply:* I’m trying to figure out, myself, how this would be technically possible and where the lines are drawn, what the limitations are.
*Thread Reply:* This will be an interesting and challenging journey, no doubt!
*Thread Reply:* if it is win10, you have all the CPS available to you , + kiosk + Powershell scripting for anything custom. The form factor would be a limiting factor.
*Thread Reply:* @ZL when you refer to a medical device use case for InTune, is there more information on that?
*Thread Reply:* https://techcommunity.microsoft.com/t5/windows-it-pro-blog/ltsc-what-is-it-and-when-should-it-be-used/ba-p/293181
*Thread Reply:* https://docs.microsoft.com/en-us/windows/iot-core/windows-iot-enterprise
*Thread Reply:* To add to this topic, is anyone familiar with bluebirdcorp.com devices and manageability through a “popular MDM”? Are there other device recommendations for the purposes I’ve described (kiosk/single app mode, everything locked down, no auto or OTA updates, etc.)? Some options under consideration are Bluebird, Zebra and Caterpillar. Thoughts?
*Thread Reply:* Zebra is the # 1 OEM for Rugged Android devices in NA with 65% market share and growing.
*Thread Reply:* Honeywell is the 2nd largest player in that space at ~10% of rugged android market
*Thread Reply:* and the smaller players like bluebird, datalogic, and caterpillar make up the rest
*Thread Reply:* Note this doesnt include Samsung “rugged” as they are not typically comparable data capture devices with features like hot swappable batteries and integrated scanners
*Thread Reply:* No need for rugged, but looking for some of the other manageability features. So, basically need only a data collection device.
*Thread Reply:* Are there limitations, restrictions or disadvantages by using the smaller players if rugged, or other features aren’t needed? Support? Manageability?
*Thread Reply:* Question inspired by this thread: https://mobilxperts.slack.com/archives/C1V75UE76/p1612898260169000
}
*Thread Reply:* Perhaps we are all too discerning given that we’re “Mobile Pros” so by the time we call into support we already have exhausted all of our other options and really just need it escalated to engineering.
*Thread Reply:* But I’m curious to hear what others have encountered. I honestly find better support in this community and on forums than through an EMM provider’s support line
*Thread Reply:* I’m going to sound like a broken record, but I say MSFT especially if you pay for premier support which is amazing. If its a regular support then you just need to play their game i.e. reboot device, collect logs. If that does not resolve the problem the next step is usually escalation to a product group.
*Thread Reply:* it takes some time but I would get result every time.
*Thread Reply:* I work at Codeproof. We believe that our software itself is great, but our quick and accurate support makes your experience amazing.
*Thread Reply:* Hi I'm new here, nice to meet you all. We work with IBM Maas360 and struggled mightily with the support for a few years. Like ZL wrote you still need to play the game to log the ticket, otherwise customer account reps cannot escalate. But now we do have the escalation path and can push enhancements to the product. Our license reseller is able to provide training and knowledge transfers for new features so we don't need to rely on IBM for it.
Have no experience with other EMM vendors' support but would imagine the bigger corporations are all about the same.
*Thread Reply:* The MDM software requires handholding in the beginning unlike other enterprise software's such as CRM..etc. Android OS/API sets are constantly changing. Like Jaakko said, the large EMM vendors have gaps in the escalation path which makes it hard to get an answer to tech queries in a timely manner. The smaller vendor like us is trying to fill this gap. Also, the smaller vendors do policy customizations/supporting a new policy/API..etc swiftly.
*Thread Reply:* What are you trying to do? are you also using iCloud family sharing?
*Thread Reply:* Yup, iCloud family sharing and using screen time controls - but these don’t always seem to work for us.
*Thread Reply:* @Jason We’re using it with 2 parents (iPhones/Macs) and 3 Kids (Macbook Air and an iPad for each). We’ve had good success on those devices, but we really need Screen Time controls in tvOS (kids can leave iPad game, then continue it on TV with no limits)
*Thread Reply:* Ok, so it sounds like a reset may be required to resolve this on one of the iPads then. Thanks @Woody
*Thread Reply:* I’ve found sometimes if they aren’t updated to the latest version of iOS (major versions) they loose contact with the Screen Time “mother ship”
*Thread Reply:* Because I would find one of the kids playing well past their allowed time and the report would show “0 minutes” from a parental report perspective
*Thread Reply:* Aha, this could be it as well. Thanks
*Thread Reply:* Jason posted on LinkedIn, I think yesterday.
*Thread Reply:* SSO Extension (New) or SSO Kerberos (Old)?
*Thread Reply:* I believe @Anton I was saying he got the SSO Extension for iOS/iPadOS working. That should have zero dependencies on Access
*Thread Reply:* @Melanie S @Woody is correct, but SSO these days can mean basically anything. What are you trying to achieve? 🙂
*Thread Reply:* @Gianmarco Cerruti there was a really good thread going on this a week or two ago. Let me find and mention you in it
*Thread Reply:* https://mobilxperts.slack.com/archives/C1U2R408Y/p1612165856012600
}
*Thread Reply:* Thanks to the linked discussion I found the answer to my particular problem and it seems that indeed it is not possible to synchronize shared contacts https://techcommunity.microsoft.com/t5/office-365/outlook-shared-contacts/m-p/1850579/highlight/true#M31842
*Thread Reply:* Oh interesting. Has the advice changed also on Android? I've got contact export into WP contacts app enabled by default now and hadn't looked into anything else.
*Thread Reply:* The problem was indicated to me on Android, from what I understood EAS does not support the management of shared contacts on mobile in general
This might be of interest: https://cloud.google.com/blog/topics/developers-practitioners/opening-googles-windows-management-tools
Intune is managed in PR China by 21Vianet on Azure physically separated from rest of the world. Do other vendors have similar setups? It appears at least Maas360 does not. https://docs.microsoft.com/en-us/mem/intune/fundamentals/china
*Thread Reply:* Hello @RobK this one might be best suited for #appconfig. So you need a managed app config XML for the Citrix Workspace app. Yeah?
*Thread Reply:* One spot I always start with is the JAMF repository. Nothing showing there as of right now. https://beta.appconfig.jamfresearch.com/generator
*Thread Reply:* @RobK so from what I can tell, Citrix is using the “Storefront” to procure the managed app configs now for Workspace
*Thread Reply:* It stinks because when it was Citrix Receiver, they had a generator to kick out the XML file for you. That apparently is now gone
*Thread Reply:* Hi Woody - thanks for your insights!
*Thread Reply:* I believe you should be able to hop into your Slack account that’s associated with Mobile Pros and update to your personal address, etc
*Thread Reply:* https://mobilxperts.slack.com/account/settings
*Thread Reply:* Wish I would have known that back when I changed🤣
*Thread Reply:* i've just changed this just in case 🤣
*Thread Reply:* Thank you @Jason Bayton , really appreciate it :)
*Thread Reply:* 👋:skintone2: @agentfrootjoozz - I recall @Caryn having recent experience with them
*Thread Reply:* I’m wondering if anyone has ever experienced a reset after updating with an SD card? It’s not suppose to but I’ve been experiencing random full factory resets after an update
*Thread Reply:* Yes, I have and no we did not do any OS updates on them, SD card or otherwise.
*Thread Reply:* For OS updates on other Zebra and Honeywell (through products), there were always reboots, but not factory resets. They were not SD card OS updates.
*Thread Reply:* Sorry - I’m not of much help in this case.
*Thread Reply:* No worries @Caryn I’m wondering if anyone else has experienced it. I updated from 8.1 to 10
*Thread Reply:* We didn’t allow SD cards, so all done through products in WS1. I just did a quick search, but didn’t find anything relevant. I thought I may have recalled reading about a flag to intentionally do that, but not 💯 sure.
*Thread Reply:* Sorry I'm not any help I haven't done anything with zebra devices yet but will be working with them soon enough for an upcoming project. Can you not do an OTA on Zebra devices?
*Thread Reply:* You can do OTA updates with the Zebra. However, the software packages are so large and delivery takes a lot of time from my experience with WS1. More often than not I’ve found failure. So I’ve chosen to do the updates with SD cards in effort to prevent unnecessary network traffic plus I could update several zebra devices simultaneously in a matter of minutes with the SD cards.
*Thread Reply:* That is the issue we had with some Honeywell devices. The OS 9 update was so large and the network connection weak/not consistent, it failed. They ended up updating the OS using SD cards.
*Thread Reply:* Good to know I'll have to keep it in mind we do all of our other updates via OTA for iOS and Windows devices so I think our network can handle it but def something to test.
*Thread Reply:* iOS updates are not bad OTA. I’d assume your Windows devices are hard wired for network so you won’t experience delays in updates there either . @Caryn @Boe my Zebra account team sent me an updated file for OS 10... thinking there is a bug with what’s available in their portal which was causing the random factory resets 😉 Thank you both for your feedback 😊
*Thread Reply:* VMware Hands-on labs: https://labs.hol.vmware.com/HOL/catalogs/catalog/1212 As far as I can tell, they are free
*Thread Reply:* Thanks, I know this one from my past employer. This one is only focused on VMware products. Was looking for something more general.
*Thread Reply:* Depends what you want to learn. I don't think you will find one that will have everything.
*Thread Reply:* Was looking torwards Microsoft related stuff with Lab environment included. And also looking for Comptia stuff.
*Thread Reply:* for Microsoft just spin up a tenant and you will have a M365 E5 licensed lab for 90 days. Once run out spin up another one. Free of charge.
*Thread Reply:* Have 1st hand experience working with Miradore team. We piloted their Miradore Management Suite which is a legacy on-prem solution to manage Windows devices. So we did not focus on the cloud MDM product but saw a demo instead. They are great people to work with, very supportive and knowledgeable. Warmly recommend.
*Thread Reply:* SOTI and 42Gears are hands down some of the best options if you are managing Zebra Android devices in a fully managed mode
*Thread Reply:* They specialize in that use case
*Thread Reply:* I wouldnt recommend them for other things like iOS or Windows management
*Thread Reply:* but for the AEDO Zebra use case they do really well
*Thread Reply:* Not Zebra - probably Bluebird devices, possibly Samsung.
*Thread Reply:* I know SOTI is pretty solid at Samsung as well, don’t know about Bluebird
*Thread Reply:* SOTI, and I believe 42Gears as well, offers native Remote Control which I view as quintessential for supporting mission critical device deployments
*Thread Reply:* It is highly likely it will be primarily Android going forward (still gathering data), potentially some Win10 but not likely.
*Thread Reply:* I am of the mindset of having the right tool for the job rather than having a “single pane of glass”
*Thread Reply:* Not everyone would agree with that stance
*Thread Reply:* Agree with the native remote control. It is critical for us as well.
*Thread Reply:* Products like Intune are the single pane of glass that don’t necessarily excel in any one thing
*Thread Reply:* Products like 42Gears and SOTI are specialized in and have a heritage of rugged device management
*Thread Reply:* So I would absolutely recommend them for that use case, I’m not sure I would say I recommend them for Win10 though
*Thread Reply:* So, not so much looking for rugged device management, but the capabilities that typically come with that, such as kiosk and locking the devices down.
*Thread Reply:* Perhaps they can leverage InTune for Windows management, as you said above. Actually, I like that strategy and I'm ok with managing multiple platforms, having done so previously.
*Thread Reply:* Matt, have you used SureMDM/Lock in production? If so, how would you compare it to SOTI?
*Thread Reply:* Have not used SureMDM in production, have only evaluated it with a trial instance
*Thread Reply:* I was impressed with the feature set compared with SOTI
*Thread Reply:* They seem a little more nimble on the development cycle and have been beating SOTI to market on certain features by about a year
*Thread Reply:* for example LifeGuard OTA support (Zebra’s version of E-FOTA) was in SureMDM over a year ago and its only now showing up in SOTI
*Thread Reply:* but the feature set for managing mission critical devices seems very similar
*Thread Reply:* 42Gears was founded by ex-Motorola/Symbol folks so they have a heritage in that use case
*Thread Reply:* It appears that way to me also. I like the focus and feature set for their kiosk mode.
*Thread Reply:* and SOTI used to go toe to toe with Avalanche for managing legacy Windows CE/Mobile devices in those kind of environments and they have applied that heritage to Android management
*Thread Reply:* I did not know that - good information!
*Thread Reply:* ...about the ex Motorola/Symbol connection.
*Thread Reply:* So this is a spinoff of Good Technologies 😆 (j/k)
*Thread Reply:* Funny you should say that, SOTI is based in the Toronto area and you will actually find a lot of ex Blackberry folks there as a result
No action is needed on our part for Mobileiron right? https://developer.apple.com/news/?id=uzyxiriy
*Thread Reply:* If you’re running Core 10.7 and below, you’ll need to add a couple of trusted root certs. No action is needed for MI Cloud. https://help.mobileiron.com/s/article-detail-page?Id=kA13n000000PS9RCAW
*Thread Reply:* hi Caryn, this can be an extremely difficult task to achieve without going to a manufacturer directly. However from reading your previous posts, these guys might be able to help achieve what you need! Read the case study they did with HMD (Nokia) to distribute devices globally for a clinical trial https://assets.ctfassets.net/d6skzop43my5/6xsgSWzsQWwhf8GMb6IMqi/93a18cdcfe78aba1a46b38336b60b438/B2B_case_study_Vessel_final.pdf
*Thread Reply:* sorry forgot to mention the company! They are called Vessels Connect - https://vesselconnects.com/
*Thread Reply:* Awesome! Thanks very much @Ajay Patel!
In case anyone uses Squirrels Reflector to capture Apple/Android screen shots/movies, they’ve got a 30% off code for the new Version 4. RF3TEmailUpgrade https://www.airsquirrels.com/reflector
*Thread Reply:* Samsungs on Android 11 no longer works with Reflector
*Thread Reply:* I use a cable and an external video capturer and it works fine, as long as device have video out on USB
*Thread Reply:* @Raul Lame! It does appear that they have a workaround to re-enable the Cast tile https://help.reflectorapp.com/support/solutions/articles/11000101532-why-can-t-i-mirror-with-smart-view-on-android-11-
*Thread Reply:* Worked like a charm on my Note 10+ on 11
*Thread Reply:* Good to know as well! I was going to be a little bummed/feeling misled if I had upgraded and Android 11 wasn’t feasible
*Thread Reply:* I love reflector. It’s excellent for Zoom demos.
*Thread Reply:* @aaron I was just using it to Cast an Android ZTE build I’m working on. Agree, it really does enhance the level of presentation
*Thread Reply:* Jamf is a go to solution for mac devices. It depends what are you trying to achieve and how big is your estate.
*Thread Reply:* My company is bidding to manage a fleet of about 2500 MacBooks. I know they previously used Windows PCs and SCCM for management. I won't be the one deciding on the new solution but I wanted to understand what the best ones on the market are. Thanks
*Thread Reply:* Jamf is recognised as a leader, but you can managed devices with WS1 or Intune, all depends on your requirements.
*Thread Reply:* Yep, I'll investigate...tnx
*Thread Reply:* If they are only managing 2500, there are some midrange solutions that are pretty impressive. One you may want to look at that is Apple specific is https://www.kandji.io/?utmsource=adwords&utmterm=kandji&utmcampaign=Brand-US-CA&utmmedium=ppc&hsatgt=kwd-618499492764&hsasrc=g&hsanet=adwords&hsacam=1654855395&hsakw=kandji&hsaad=449303689104&hsaver=3&hsaacc=1685973693&hsamt=e&hsagrp=63130169426&gclid=EAIaIQobChMIq46sqOva7wIVgfGzCh2HUAlVEAAYASAAEgIlnfD_BwE|Kandji. There is always Gartner to at least get a general idea of who the players are (from their perspective).
*Thread Reply:* I can’t believe I fell for it :face_palm:
*Thread Reply:* Haha love it. I got a few folks in some big organisations 😁
*Thread Reply:* It was a beautiful job, very believable ;)
*Thread Reply:* Still relatively manic for me currently. Possibly even continuing on an upward trend now orgs have sampled alternative working and look to enable it longer term.
*Thread Reply:* We grew 10k devices active over the past year. So I guess I am busier, but the surge is over for me.
*Thread Reply:* calm before the storm here... big projects kicking off in the coming weeks.
*Thread Reply:* Maintaining a steady pace. Spring Break was a nice pause, but have lots in progress and the pipeline is well stocked.
*Thread Reply:* No shortage of work here, just more controlled chaos.
*Thread Reply:* Wait I'm confused running around like a maniac during work hours isn't the norm. Damn it I knew I was doing it wrong all this time 😄
*Thread Reply:* Well i’m not saying I’m short on work, I’m just back down to the normal levels of Mania I experienced b4 the pandemic 😉
*Thread Reply:* No shortage here, it's still all hands on deck, just remote
*Thread Reply:* Enough work, that we're hiring an FTE.
*Thread Reply:* 8-10 meetings per day!! Busier than ever. Need to get better at managing remote working habits of my co-workers as its currently meeting tsunami
*Thread Reply:* I hear you @Paul Conaty So many meetings I can't actually get work done.
*Thread Reply:* Meetingageddon.... the pandemic is not an excuse for excessive meetings! How does work get done if there are continual meetings? 🤔
*Thread Reply:* Hey brother... long time, no holla! I have not found another way. If you want, I can spin you up an account in my Partner account so you can do it.
*Thread Reply:* What up!!! It’s been a while! Are you busy?
*Thread Reply:* AE training can be accessed through any non @gmail.com/hotmail.com/etc address. So if you have a Google account under a personal domain as I do, it should let you in as it does me :)
*Thread Reply:* Yeah, it didn’t work for me. I had to buy into g-suite.
*Thread Reply:* I have something to offer, ill reach to you in DM.
*Thread Reply:* If someone is interested in these kind of solutions let me know, I can help.
*Thread Reply:* I fully agree. Even Microsoft has recently moved away from this advice.
*Thread Reply:* Every 30 days 😑. More Annoying? Yes. More Secure? No
*Thread Reply:* Hey @shahrose khalid. Did we used to work together when you were an admin for a previous federal org? This would be a fantastic enhancement suggestion. For any customer enhancement suggestions we have the Request for Enhancement process that is utilized to collect feedback such as this. You can find a link to a blog post outlining how to submit an RFE here: https://community.ibm.com/community/user/security/blogs/ciaran-darcy/2019/03/14/how-to-submit-maas360-rfe-request-for-enhancement I highly encourage that your customer submits this RFE so that our product team can review and track suggestions such as this one.
*Thread Reply:* Also for clarification, the current portal admin password expiration period is 90 days, not 30 days.
*Thread Reply:* @VladYES! lol nice to hear from you again man. Hope all is well on your end. I will go ahead and ask my client to submit this request. Thank you
*Thread Reply:* This is one of the reasons why we always try to avoid using local identities when signing into MaaS. Federating with an iDP or AD directly resolves a lot of these issues. However i understand that doesnt always work for a lot of people
*Thread Reply:* For Samsung you would need Knox Mobile Enrollment instead of Zero Touch afaik.
*Thread Reply:* Agreeing with Julio. Samsung Knox Enroll is free of charge and you can sign up for it yourself. Devices should be assigned by your supplier or you can use the Samsung Knox Deployment app (Android app) to push devices into your portal.
*Thread Reply:* The S8 is eligible for ZT and doesn’t require KME. Also, I can’t get KME without a taxID. I do like the bump option to push Samsung devices into KME. I guess I wish ZT had something similar.
*Thread Reply:* Also, I’m doing all of this to get past the third part of the AE certifications which Knox is not really a part of. Ultimately, when the pixel 6 comes out, as a prosumer, I’d like to get the color option I want and apply it to my ZT portal. All of the approved AE resellers only sell one generic model of the pixel 5. I’m trying to see if there’s a consumer channel that can still get me the device I want and still apply it to ZT. My current mobile provider can’t do anything for me without a taxID and don’t want carrier Android on anything I own.
*Thread Reply:* Interesting! I was able to get Knox without a taxID! Not really what I was after but good to know!
*Thread Reply:* I did look at ZT but the suppliers we talked to had a min order of 10 devices before setting us up which I could not justify for R&D
*Thread Reply:* I have the ZT portal already, CDW was able to set that up for me. It took about two weeks and I have to have G-Suite and a business name. T-Mobile would do it if I had a taxID but their Android selection is awful and I refuse to use carrier Android anymore.
*Thread Reply:* @shahrose khalid there is a #maas360 channel where you can ask questions like these too just as a heads up
*Thread Reply:* How was the device enrolled? When you say the user has to log into the device are you talking about signing in to the MaaS360 app or are you referring to unlocking the device?
*Thread Reply:* What EMM are you using? Maybe you have device enrollment restrictions in place that is blocking that enrollment. Or your user reached the device limit?
*Thread Reply:* Got it, I’m using Navita EMM. I’m a developer and generated a new management profile because the old one had expired. I followed this article to make the whole process. But in step 12 I couldn’t sign because I had an error. Soon after, when performing some tests, this error in the image above was returned
*Thread Reply:* https://developerinsider.co/how-to-create-a-verified-ios-mobile-device-management-mdm-profile/
*Thread Reply:* do you have a valid APNS certificate ?
*Thread Reply:* Is there a duplicate entry for the device in the MDM? I received this several times with MI Cloud when there was a stale/orphaned account for the device that was trying to be enrolled.
*Thread Reply:* Thanks @Ivo Kazimirs and @Woody 👍
*Thread Reply:* Hm, I can tell you that after I saw all the matches of the first round, especially France vs. Germany😅
*Thread Reply:* Yup, I’m looking forward to that one, but still - any predictions at this early stage?
*Thread Reply:* It should prove to be an interesting tournament, that’s for sure!
*Thread Reply:* I’m really not sure - France look strong, as do Netherlands (and even Belgium). England would be my preference, but still seem to lack confidence in the last third of the pitch for me. Germany and Spain don’t look as sharp as they have been in the past, but may still surprise. Italy I haven’t followed that closely…
*Thread Reply:* I would see it in the same way. Italy could be a surprise tho..
*Thread Reply:* Does a delete of the app and reinstall solve the issue?
*Thread Reply:* @DirkC unfortunately, it does not
*Thread Reply:* I’ve got the team checking the troubleshooting/logs from the WS1 UEM console. It’s got to be failing when it’s trying to generate the managed config PLIST etc.
*Thread Reply:* I don’t believe the DEP policy allows for backup/restore… which is the only other item that Box support has thrown out.
*Thread Reply:* A customer of mine is facing something similar/same (On-Prem install of WS1). I couldn't fix it. VMware Support is still looking at it, but couldn't find anything incorrectly configured. The customer also has a test setup and there it works without issues...
*Thread Reply:* Only iOS devices has this problem. They have also Android devices and there Boxer App config's are being set.
*Thread Reply:* I had almost 0 issues with Boxer config until this morning for one of our customers. I couldn't find what was going on. iOS devices, 2005 On-Premises.
*Thread Reply:* customer's environment is at version 2102 in production (doesn't work) and 2008 in test environment (works).
*Thread Reply:* @Sidney @Steven Are you guys talking about Boxer or Box (file storage)? My issue is with the latter. Box for EMM. Box’s client specifically for deployment with an MDM.
*Thread Reply:* I was talking about Boxer App Config, but the issue is maybe with all iOS apps
*Thread Reply:* I was talking about Boxer too ! I now see this post was about Box and not Boxer 👀
https://www.theverge.com/2021/6/30/22556992/slack-huddles-audio-calls-feature-launch-discord-like
Oh oh oh.
https://www.theverge.com/2021/6/30/22557390/google-apk-app-bundles-package-format-play-store
*Thread Reply:* Nice. Deployed to supervised devices as a proxy config and done?
*Thread Reply:* Yep. Along with a certificate payload for authentication.
*Thread Reply:* Worked well for the home schooling
*Thread Reply:* Awesome. So it’s not an open proxy, gotta have the cert for auth. Is it a single cert or is one dynamically issued for each device?
*Thread Reply:* We do a single config. But it probably could be dynamic.
*Thread Reply:* Single is fine. keeping it simple.
*Thread Reply:* Can’t see why you’d want to hack in and get proxied on purpose lol.
*Thread Reply:* Customer is talking about trying to configure OpenDNS on each device and content filter that way. Please, God no!
*Thread Reply:* Or he’s hourly and looking to clean up 🤑
*Thread Reply:* Dropbox Business - users love it, it’s a damn good collaboration solution (more than just a drive in the cloud) and yes, before you ask, we also believe it is a great way of dealing with the security challenges corporates worry about with Dropbox’s consumer product. Using Dropbox to address the Dropbox problem, if you will.
For those interested: https://mobile-jon.com/2021/09/20/boxer-vs-outlook-for-ios-2021-face-off/
*Thread Reply:* Me. I’ve been busy as always. Too many devices. Not enough people. Running 35k devices and 2 engineers/architects.
*Thread Reply:* Something here similar too… I don’t think anything new has come up, like this… Everyone is just busy…
*Thread Reply:* I'm spreading myself a little thin also at the mo..
*Thread Reply:* WFH - MeetinGeddon. not enough time in the day to actually do stuff
Hey all Don't put that kind of complex policies! https://twitter.com/humansnocontext/status/1439835329725452291?s=21
}
Twitter
*Thread Reply:* I'm 💯 confident if my security team could get away with us requiring that they would 😂
*Thread Reply:* I’m pretty sure this is not a human 🤣. This is probably Tesla bot pinging back home to Elon.
https://mobile-jon.com/2021/09/27/mobile-jons-6-moments-of-excitement-for-ios-15/
*Thread Reply:* I think that would be @Jason Bayton
*Thread Reply:* Will this just go dark when that day comes? Should we maybe transition to more of a forum model in the future?
*Thread Reply:* nah Slack bumped us up for no reason, and when it expires it'll go back to the free plan
*Thread Reply:* Ahh, so we’ll just be at the 10K message limit again and can carry on that way
*Thread Reply:* Not sure why they bother sending notifications to users on stuff like that…
*Thread Reply:* so you will be scared into paying money?
*Thread Reply:* Haha. Notification dismissed… conscience clear
*Thread Reply:* I know, but until a few weeks ago you could browse back as far as you wanted. I saw the notifications about the pro plan and stuff, but didn’t think they would limit the history that we would have access to. Thought they’d add extra stuff that would be paid for, but didn’t expect this, even though we are on a free plan.
*Thread Reply:* @Jay they temporarily bumped us up to a Pro plan and then dialed it back after the free trial expired.
*Thread Reply:* Yeah, we've always been on the Free plan and Slack just decided to bump us. Should have taken the opportunity to do a full export and move to rocket.chat or something tbh 😛
*Thread Reply:* That's awesome! I actually laughed at another app that did something similar (promoted on FB). Gonna see if I can find the link. Though I'm sure some ppl would be worried about the mic being on all the time.
*Thread Reply:* So I have this App in use. My wife don‘t let me sleep without a watch and this app anymore. The watch has no radio connection overnight, so I believe the manufacturer that no data flows outside here.
*Thread Reply:* @iMZ this is the one I kept getting ads for https://fb.watch/arzqG8MT-s/
*Thread Reply:* Okay, this app just recording ... the other one actively prevents me from snoring
*Thread Reply:* I was laughing about the 💨 monitoring 😆
*Thread Reply:* Sadly I use Slack more for DMs these days... don't have as much time to watch channels and hop into threadS
*Thread Reply:* Thanks man! We were using AnyConnect and running into all some weird issues (in mi core) which I think were actually related to MI Core rather than the AnyConnect app itself. I'll have to take a look at F5's solution.
*Thread Reply:* Passing fad, just like that Internet thing.
*Thread Reply:* I start to worry about commoditization
*Thread Reply:* More and more random and generic Android manufacturer entrants. Unification of management practices via Android Enterprise and concepts like OEMConfig. EMMs are becoming increasingly the same. Enterprises are starting to finally figure things out. It’s hard to continue to provide differentiating value in that kind of environment.
*Thread Reply:* The value comes from the partner implementing them; when the tech is pretty similar, the gaps in service/proposal become way more obvious.. be amazing™
*Thread Reply:* https://c.tenor.com/AgFcSGVtji8AAAAM/foo-fighters-hair-flip.gif
*Thread Reply:* I'm a fan of both the NFC embedded ones, and designs that incorporate a QR code for easy importing
*Thread Reply:* I had a meeting with an Ukranian startup for the solution which uses NFC as well as QR.Heard from a friend that NFC will have issues on iPhones.How true it is ?
*Thread Reply:* I use a nfc card with iPhone regularly. Mine is from Linq. Linqapp.com. They also have an AR card linked with the nfc card. It is very nice.
*Thread Reply:* I haven't seen anything new recently I'm afraid. Intune's AOSP management is coming along, which might be worth a look for you. Some other EMMs are upping their AOSP management as well, leaning on AE APIs locally on-device with a custom DPC rather than relying on Goog's infra.
*Thread Reply:* Thanks, Jason! I had no idea Intune was working on AOSP! From what I understand, Azure in China isn't owned by Microsoft, does this cause many issues that you're aware of? I just learned WS1’s registered mode is custom DPC. It kinda sounds like it's the best path. We're trying to build the least invasive BYOD solution while still delivering a lot more than what a MAM does.
*Thread Reply:* We're also looking at Okta’s basic mdm but it looks like it's about to be deprecated.
*Thread Reply:* Okta won't get involved with mdm , what they do have is fast pass which is basically registered devices for sso . Basically it's device trust but initiated by you as the owner .
*Thread Reply:* RSS feeds? no. But you could follow the individual company blogs, follow each of them on LinkedIn, follow big names like @Jason Bayton on twitter and LinkedIn
*Thread Reply:* I've tried using a razpi 4b with 12, lineage-19.0. Which supports GMS but doesn't come installed, so when I try hub enrollment for registered device mode, it tries to install Play services. Oh well, worth a shot.
*Thread Reply:* @Andrew Adams you'll need to configure WS1 for AOSP/closed network then do the enrolment
*Thread Reply:* If you used AOSP closed network enrollment and then disabled all of the GMS services on the device via blacklist it would effectively be in AOSP mode. If you are targeting Fully Managed you’d also have to utilize an OEM provided mechanism for DO enrollment since you wouldnt be able to use any of the SUW based methods for DO on an AOSP device.
*Thread Reply:* For example on Zebra AOSP devices we can enroll them DO via the StageNow tool that Zebra provides as it is able to install and set a DPC as DO. Honeywell has something similar to StageNow called enterprise provisioner that can do the same without going through the standard methods (Eg. QR, NFC, DPC identifer, ZTE)
*Thread Reply:* SOTI MobiControl also offers “offline” management, and recently even added the ability to distribute OEMConfig and other managed configurations directly to devices without requiring distribution through the Play server infrastructure
*Thread Reply:* Thanks for the info guys! I had to modify Management Mode to not require MDM managed. I'm guessing this is Registered Mode? Is it just a glorified app catalog with no security enforcement? I can't push managed apps or tunnel them. I wish I was using a Zebra like platform and not trying to solve for the 400+ different models of Android used in China. I can also flash those easy enough with ADB if I can convince a Zebra employee to let me to download those OS files!
*Thread Reply:* Try your question in #workspace_one :)
*Thread Reply:* No, I can't say I've come across anything of the sort.
No one can claim passwords as IP, lol.
The only edge-case I could imagine some difficulty on would be proprietary stuff, but even then you're exporting config preferences, not intellectual property.
*Thread Reply:* Thanks very much for confirming Jason!
*Thread Reply:* @Daniel Skaaning you will want to ask this in #microsoft_endpointmanager
*Thread Reply:* Not really. Maybe ELO?
If you've a need for a few thousand (MOQ for manufacturing..) I can build you one.
*Thread Reply:* Zebra has some LTE options but they max out at 10" I believe
*Thread Reply:* @Matt Dermody Zebra is not cost effective, but appreciate your input for sure!
*Thread Reply:* Thanks Justin! We were looking at this tablet and told, by Lenovo, we could not get it in the US with LTE.
Any Okta customers here? https://www.theverge.com/2022/3/22/22990637/okta-breach-single-sign-on-lapsus-hacker-group
*Thread Reply:* Perhaps the question should be.. who isn't an Okta customer? Mixed messaging coming out from Lapsu$ and Okta on this one.
*Thread Reply:* https://www.okta.com/blog/2022/03/oktas-investigation-of-the-january-2022-compromise/
*Thread Reply:* and https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/
(Zoom calls - announcements with CSO starting in a moment -- see article for details, couple sessions)
*Thread Reply:* As a former Okta employee, I hated to post that but its kind of a big deal. Let's be honest though, MSFT and other have/will encounter these types of things at some point. No one is impenetrable these days.
*Thread Reply:* Sure 🙂 OKTA consultant here (among others), OKTA customer, WS1 customer. It now looks that platform is not broken, but endpoint having access to platform was compromised and remote accessed, with authenticated session "to-platform" being open -- so end of the day, platform was accessed by unknown/hostile operator to some content.
*Thread Reply:* MSFT side incidents start to be so common (gut feeling) that most are like.. source code, code signing certs stolen.. meh.
Behind the scenes of course, it's huge deal - regarding trust to your vendor.
*Thread Reply:* Referring to: https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/ • open communication, transparency and of course mitigations, post-mortems.. more open you can be the better.
*Thread Reply:* @Ville Raassina and @Woody I fully agree no one is impenetrable but concern of course is "have any customers" been breached through this. The Lapsu$ group seem to be a strange org with rumours of them being out of South America and rookies but then we see Okta, MSFT, Nvidia and before that local media orgs and telcos... seems a big leap?
*Thread Reply:* Agree, they've come a long way in a short amount of time.
*Thread Reply:* Theres no evidence to suggest nation state involvement but its a hell of a leap in targets!
*Thread Reply:* Their method of openly "recruiting" employees/contractors that work with big tech companies seems to be their way of how they have been successful. Probably has a lot of companies re-looking at their least privilege approach.
*Thread Reply:* Oh yes the insider threat has never been greater!
*Thread Reply:* I get the same on my estate, looks to be part of a regular authentication token expiry as we'd see with other MS apps. Since it's not the DPC on the device but more of a companion app it hasn't caused much fuss to date
I know this is all about mobile. But if anyone is looking to change things up. Here is a JD of a position open on my team. Its in Adtech. More of a solution architect role. https://jobs.jobvite.com/siriusxm/job/ogwsjfwh talk to me if it seems interesting
*Thread Reply:* Finding comparion is really difficult over the internet. I am trying to write the blog on it..hope fully it will get published soon
*Thread Reply:* Have got a trial subscription but does not seem to have any of the MDM features. Are these only in Trend Micro On-prem?
*Thread Reply:* I am biased towards SOTI MobiControl, and only can really speak to the top notch Android (specifically dedicated devices / fully Managed) support
*Thread Reply:* But I do know they also offer some Linux device management that could be worth exploring
*Thread Reply:* https://soti.net/solutions/linux-management/
*Thread Reply:* They have a Cloud-based SaaS offering and offer 30 day trial cloud environments to test things out
*Thread Reply:* Thank you for your suggestion and insight. I am very familiar with Soti and will inquire around their Linux support capabilities. Greatly appreciate your feedback!
*Thread Reply:* Hey there, you could use VMware WS1 SaaS as an alternative.
*Thread Reply:* We do enforce 6-digit alphanumeric, but allow biometrics. User feedback is "huh, that's annoying", but no real complaints (could also be because it's a case of "it's always been like this")
*Thread Reply:* Currently the user of a 12-character alphanumeric w. biometrics. The only time it sucks is on reboots and if the timeout expires and you have to re-enter the password. Makes it worse if you have to frequently change (like every 60 days).
*Thread Reply:* @Cedric Lüke what industry is that if you don't mind?
*Thread Reply:* Complex Numeric only with biometrics! Too much of a headache otherwise…
*Thread Reply:* Semi related and perhaps someone still needs a reminder, even for AD accounts the password policy recommendation by Microsof is “Don’t require mandatory periodic password resets for user accounts” - src: https://docs.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations
*Thread Reply:* I don’t mandate or recommend alphanumeric, because I don’t hate the people I work with 😄
*Thread Reply:* It clearly died when I left the board in 2019 😂
*Thread Reply:* Oh nothing special. I was on the board while at CWSI, left the company and the board at the same time.
*Thread Reply:* I still think it's a valuable cert and more like this should be had in our industry. Maybe we should sort a mobile Pros one 😜
*Thread Reply:* I’d be up for contributing to something like that for sure!
*Thread Reply:* I guess maybe better asked if people don't use it :)
*Thread Reply:* I don’t but would be willing to check it out
*Thread Reply:* Yep I use it - good initiative
*Thread Reply:* I’ve seen several mentions of it alongside Discord. Figured it was an up and coming contender.
*Thread Reply:* The primary reason we’d ever switch off of slack would be the loss of premium features here (e.g. message history) right?
*Thread Reply:* Do we know if we’d actually be insulated from that on Telegram, or are some of their features behind a paywall as well?
*Thread Reply:* I think telegram is not limited... I have been using it for a while now...
*Thread Reply:* I see no obvious limitations. There's a paid tier for individuals but doesn't appear to limit groups.
Frustratingly they limit full group admin until there's 200 group members, so I can't set it up to mirror slack.
Here's the invite to the public group if you want to check it out (nothing really to see)
*Thread Reply:* I’ve also spun up a rocket.chat instance on my home server. That has no restrictions, and looks basically like a clone of slack. Of the 160k messages, slack exports about 60k from public channels, the rest is inaccessible which is a bummer
*Thread Reply:* Nice, are you saying that you’re willing to host this for all of us?
*Thread Reply:* Not on my home server.. but I'd host an instance on my VPS if RC looks promising
*Thread Reply:* Had a quick look - not bad plus there is a mobile app
*Thread Reply:* The ability to archive tonnes of useful info is a real plus
*Thread Reply:* I've dumped an export from slack while on the trial and disabled emails so I can do an import and test functionality without inviting 1600 folks to a localhost instance 😁
*Thread Reply:* Sounds promising although the debate is open as to whether or not the platform may become subscription based! Let’s just hope they don’t get greedy and start charging 😉
*Thread Reply:* Hopefully while it's self hosted that won't be the case..
*Thread Reply:* How to join? I tried mobilxperts.rocket.chat it says invalid...
*Thread Reply:* It's on a little VM in my house.. it's not yet ready for prime time mate!
I would suggest we need proper go-ahead from the community first anyway, since 2-3 people so far isn't many 😅
*Thread Reply:* I'd say this could actually drive more traffic.
*Thread Reply:* Do we have any update on this? 🙂 New to this space and keen to see more ongoing discussions!
*Thread Reply:* It's on my list, I've been sidetracked over Christmas :)
*Thread Reply:* I would also like to propose maybe bi weekly catch-ups on clubhouse or any group audio discussion platforms to brainstorm on some common topics and ideas...
*Thread Reply:* Eager to hear this podcast. I've always been surprised at the lack of mobility-related podcasts, but I'm just not chatty enough to go start one. Who better than Jason!?
*Thread Reply:* Is that a rhetorical question? Because I think there are many folks better known for not waffling like an iHop at breakfast as I do 😂
*Thread Reply:* rhetorical indeed! i'd rather hear a waffling SME (with syrup) than a bland egg
*Thread Reply:* Seems like this community could give you tons of content. Just refer to all the most common questions and make an episode about it. The challenge would be making it appealing to the widest audience - IT decision makers who don't actually understand mobility, as well as the mobility admins who have only touched one kind of MDM (most).
https://openai.com/blog/chatgpt/
*Thread Reply:* Anybody given this a whirl yet? I’ve put it to the test a bit today and have been pleasantly surprised with some of the answers
*Thread Reply:* Yeah this thing is wild. Not perfect, but it gives me a run for my money on a lot of topics 😂
*Thread Reply:* I think whats scary is the confidence level that it delivers some of the answers with
*Thread Reply:* You can respond back and say “that’s not true, actually…” and it will say “yeah, you’re right”
*Thread Reply:* I saw that with a sea mammal question on twitter last night
*Thread Reply:* You can have it write all your articles for bayton.org now! ha
*Thread Reply:* I was gonna say actually I'm probably out of a job now 😂
*Thread Reply:* Some of the comments on here are hilarious 😂 seems the ChatGPT servers are currently experiencing high traffic!
*Thread Reply:* Use a logitech multi-device product, such as the mx line. They are great.
*Thread Reply:* I use the Logitech MX Keys and MX Master 3 for almost two months now, connected to a Macbook Pro and to a Windows Desktop PC at the same time, works perfect. I still got one slot open to connect a third device, like an iPad for instance, so I highly recommend Logitech for this.
*Thread Reply:* I second the Logitech MX keys and Master suggestion. Works great with Mac and Windows. Is limited to three devices though.
*Thread Reply:* MX keys here also. Multi device switch is so simple and it just works!
*Thread Reply:* Merry Christmas Jason and everyone :happy_christmas:
*Thread Reply:* Merry Christmas and a Happy New Year guys! 🙂
*Thread Reply:* And a Happy New Year to you sir!
*Thread Reply:* They got rid of their Mac app back in mid 2022.. web is the only option. Not tried it but you could potentially try chrome/edge web apps if available on Mac as an alternative but basically the same thing as having the web page open basically
*Thread Reply:* No such apps… checked already… thank you…
*Thread Reply:* Can you explain what do you mean by saying: "more efficient within the Intune platform or in general"? What are you expecting to see/have?
*Thread Reply:* Mainly tryign to see what others are doing with the platform for their mobile fleet to see if we can improve the end user and admin experience.
*Thread Reply:* Check out the #microsoft_intune channel :)
*Thread Reply:* Thank you @Jason Bayton
*Thread Reply:* We use a SaaS based solution called AppSpace that I believe des all you’re looking for. Albeit we only use it for meeting room reservation and visitor management, I believe it can do your additional requirements
*Thread Reply:* @Ajay Patel Thanks Ajay,any specific reasons for choosing appspace for room booking over MTR panels?
*Thread Reply:* Wasn’t my decision but ultimely we use AppSpace for digital signage and visitor management also so made sense to keep it all centralised including room booking. As we have over 100+ offices globally the visuals offered by AppSpace were also a bonus. Allowing us to upload floor plans of sites and highlight where rooms are etc. they also integrate with all major vendors like Logitech Tap devices that we use outside rooms like the Teams panels but ensures we keep all meeting info in one place/app
*Thread Reply:* @mahiroux is goBright something you look for?
*Thread Reply:* I can recommend https://robinpowered.com/
*Thread Reply:* Time to pick-up some old habbits, sometimes a reminder is enough 😉
Discover diverse job openings in innovative blockchain projects supported by OKX Ventures. At this time, we are actively seeking specialists to join our team. Visit our job board here to apply. https://okxgroup.notion.site/Job-Board-OKX-Ventures-85cfce928210436fa9075f9eb019e3d1
We are actively seeking specialists for positions such as: Development & Engineering (Blockchain Developers, Fullstack, Back-end, Mobile devs, PMs), Business & Strategy (BD, PM/PO, Analytics, Researches, Digital Asset Lead etc), Marketing (SMM, CMO). For inquiries regarding vacancies, please contact alex@okxgroup.online
Here are a couple of job openings: React Native Mobile Developer (Fintech and Web3) [USD 80K-110K] [Remote] Game Tester P2E [$30/-$60/h + bonus] [Remote] Web3 - Frontend Developer [USD 90K-110K] [Remote] Quality Assurance Specialist (QA) [USD 80K-90K] [Remote] Solidity Engineer / Blockchain Developer [USD 130K-150K] [Remote] Algorithmic Trader in Defi [USD 80K-110K] [Remote] [Part-time] Project Manager (DeFi, Crypto) [USD 170K-190K] [Remote] DeFi Research Analyst [USD 80K-100K] [Remote] Analytics Manager [USD 90K-120K] [Remote] Technical Business Development Lead [USD 220K-250K] [Remote] CMO (Blockchain, Crypto, NFT) [USD 110K-120K] [Remote] Blockchain Product Manager [USD 180K-200K] [Remote]
*Thread Reply:* Hey! Good morning. I'm interested also in that. As we are MDM provider, we have been improving our data lakes to look for patterns, etc. Would be nice to find people who already deal with this and how they extract value from that.
Just curiosity, why are you looking into that?
*Thread Reply:* Yes I use this frequently with either Zebra VIQF or SOTI XSight
Hey, yall. My org is doing a fitness fitness. I would love to join. It's just doing what you do every day. It's a step challenge. Join the "Mind Over Miles Race" group on StepUp, a fun app for step challenges. Get the app and then tap this link. https://join.thestepupapp.com/BwR2
@channel good day! I sent out the following email to all members earlier, however many mailboxes rejected a mass mail, so here it is again:
> Hello! > > As you know, Mobile Pros has been a Slack community since its inception back in 2016. It has served us well as we’ve grown to a community of almost 1900 > > With upcoming changes to Slack’s free tier however, and ongoing discussions about how we retain access to a lot of our historical messaging & information without having to pay thousands of pounds(/dollars/etc) to bring the Slack team up to a Pro (or better) tier, a move to another platform seems to make the most sense. Discord is currently leading as a suitable 1:1 replacement, where members can boost the community as individuals rather than under an all-encompassing subscription - but options are still available. Rocket.Chat is a free and open source platform heavily influenced by Slack, and others exist also; as long as there’s a data migration path, it’s in scope. > > It won’t be possible to undertake a complete migration, unfortunately. Slack only permits the export of public channel histories. Private messages will be lost in any way we go about this, and any private channels that aren’t converted to public will also unfortunately be left behind (I’ve asked Slack in the past and even if we bumped up to a paid license we still need permission from Slack for private export, they said no last time). > > So, for the request to you - if you have any private channels you’d like to be migrated over that are suitable to be temporarily made public, please head into your channel settings in the next week and switch them to public. > > If you’d like to chat about the migration, and provide input on where to go, tools to do so, etc, I’ve started a thread here - https://mobilxperts.slack.com/archives/CG7U0TYFJ/p1719571102746699 > > Thanks to all of you for your contributions to the community so far; I’m hopeful this next phase will allow the community to better serve existing members, and new folks going forward. > > Catch you in-channel!
}
*Thread Reply:* If you’re happy backing your own messages up, no worries 🙂
*Thread Reply:* When is the switch-over date? Discord I'm assuming?
*Thread Reply:* In the next week, discord seems to be the only contender. I'll attempt a data migration and if it works trigger invites 🤞
